|
1352 | 1352 | </bean>]]></programlisting> |
1353 | 1353 | </section> |
1354 | 1354 | <section> |
1355 | | - <title>SpringPlainTextPasswordValidationCallbackHandler</title> |
1356 | | - <para> |
1357 | | - The <classname>SpringPlainTextPasswordValidationCallbackHandler</classname> requires an Spring |
1358 | | - Security <interfacename>AuthenticationManager</interfacename> to operate. It uses this manager |
1359 | | - to authenticate against a |
1360 | | - <classname>UsernamePasswordAuthenticationToken</classname> |
1361 | | - that it creates. If authentication is successful, the token is stored in the |
1362 | | - <classname>SecurityContextHolder</classname>. You can set the |
1363 | | - authentication manager using the <property>authenticationManager</property> |
1364 | | - property: |
1365 | | - </para> |
1366 | | - <programlisting><![CDATA[<beans> |
1367 | | - <bean id="springSecurityHandler" |
1368 | | - class="org.springframework.ws.soap.security.wss4j.callback.SpringPlainTextPasswordValidationCallbackHandler"> |
1369 | | - <property name="authenticationManager" ref="authenticationManager"/> |
1370 | | - </bean> |
1371 | | -
|
1372 | | - <bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager"> |
1373 | | - <property name="providers"> |
1374 | | - <bean class="org.springframework.security.providers.dao.DaoAuthenticationProvider"> |
1375 | | - <property name="userDetailsService" ref="userDetailsService"/> |
1376 | | - </bean> |
1377 | | - </property> |
1378 | | - </bean> |
1379 | | -
|
1380 | | - <bean id="userDetailsService" class="com.mycompany.app.dao.UserDetailService" /> |
1381 | | - ... |
1382 | | -</beans>]]></programlisting> |
1383 | | - </section> |
1384 | | - <section> |
1385 | | - <title>SpringDigestPasswordValidationCallbackHandler</title> |
| 1355 | + <title>SpringSecurityPasswordValidationCallbackHandler</title> |
1386 | 1356 | <para> |
1387 | | - The <classname>SpringDigestPasswordValidationCallbackHandler</classname> |
1388 | | - requires an Spring Security |
| 1357 | + The <classname>SpringSecurityPasswordValidationCallbackHandler</classname> validates plain text |
| 1358 | + and digest passwords using a Spring Security |
1389 | 1359 | <classname>UserDetailService</classname> |
1390 | 1360 | to operate. It uses this service to retrieve the |
1391 | | - password of the user specified in the token. The digest of the password contained in this |
| 1361 | + (digest of ) the password of the user specified in the token. The (digest of) the password contained in this |
1392 | 1362 | details object is then compared with the digest in the message. If they are equal, the user has |
1393 | 1363 | successfully authenticated, and a |
1394 | 1364 | <classname>UsernamePasswordAuthenticationToken</classname> |
|
0 commit comments