mirror of
https://github.com/NationalSecurityAgency/timely.git
synced 2026-11-09 12:11:26 -10:00
61 lines
2.7 KiB
XML
61 lines
2.7 KiB
XML
<beans:beans xmlns="http://www.springframework.org/schema/security"
|
|
xmlns:beans="http://www.springframework.org/schema/beans"
|
|
xmlns:util="http://www.springframework.org/schema/util"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans
|
|
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
|
|
http://www.springframework.org/schema/security
|
|
http://www.springframework.org/schema/security/spring-security.xsd
|
|
http://www.springframework.org/schema/util
|
|
http://www.springframework.org/schema/util/spring-util.xsd">
|
|
|
|
<beans:bean id="x509PrincipalExtractor" class="org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor">
|
|
<beans:property name="subjectDnRegex" value="CN=(.*?)(?:,|$)"/>
|
|
</beans:bean>
|
|
|
|
<beans:bean id="timelyUserDetailsService" class="timely.auth.UserDetailsService">
|
|
<beans:property name="users">
|
|
<util:list>
|
|
<beans:bean class="timely.auth.TimelyUser">
|
|
<beans:constructor-arg name="subjectDn">
|
|
<beans:value>CN=example.com</beans:value>
|
|
</beans:constructor-arg>
|
|
<beans:constructor-arg name="auths">
|
|
<util:list>
|
|
<beans:value>D</beans:value>
|
|
<beans:value>E</beans:value>
|
|
<beans:value>F</beans:value>
|
|
</util:list>
|
|
</beans:constructor-arg>
|
|
<beans:constructor-arg name="roles">
|
|
<util:list>
|
|
<beans:value>G</beans:value>
|
|
<beans:value>H</beans:value>
|
|
<beans:value>I</beans:value>
|
|
</util:list>
|
|
</beans:constructor-arg>
|
|
</beans:bean>
|
|
</util:list>
|
|
</beans:property>
|
|
</beans:bean>
|
|
|
|
<beans:bean id="x509AuthorizationProvider" class="org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider">
|
|
<beans:property name="preAuthenticatedUserDetailsService" ref="timelyUserDetailsService" />
|
|
</beans:bean>
|
|
|
|
<user-service id="usernamePasswordService">
|
|
<user name="test" password="test1" authorities="A,B,C" />
|
|
</user-service>
|
|
|
|
<beans:bean id="UserNamePasswordAuthenticationProvider" class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
|
|
<beans:property name="userDetailsService" ref="usernamePasswordService"/>
|
|
</beans:bean>
|
|
|
|
<authentication-manager alias="authenticationManager">
|
|
<!-- X509 PreAuthenticated authorization provider -->
|
|
<authentication-provider ref="x509AuthorizationProvider"/>
|
|
<!-- Basic authorization provider, validates provided username and password -->
|
|
<authentication-provider ref="UserNamePasswordAuthenticationProvider" />
|
|
</authentication-manager>
|
|
|
|
</beans:beans> |