Versions Compared

Old Version 6

changes.mady.by.user Unknown User (roland.huss)

Saved on

compared with

New Version 7

changes.mady.by.user Michael Sparer

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

No Format
    <filter>
        <filter-name>Acegi HTTP Request Security Filter</filter-name>
        <filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>org.acegisecurity.util.FilterChainProxy</param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>Acegi HTTP Request Security Filter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

Please mind that it is important to put the Acegi-filter-mapping before the wicket-filter-mapping. Otherwise the wicket-authorization would be dependend on values that haven't been set yet.

You now have setup Acegi to put a security token in the 'security context' (which comes down to a thread local variable) during the invocation of each and every request, based on some information in the session. At the end of the request, the security token is removed from the security context.

...