support client login and calls to api through jQuery.
This commit is contained in:
@@ -1,15 +1,20 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<beans:beans xmlns="http://www.springframework.org/schema/security"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:beans="http://www.springframework.org/schema/beans"
|
||||
xmlns:sec="http://www.springframework.org/schema/security"
|
||||
xsi:schemaLocation="
|
||||
http://www.springframework.org/schema/security
|
||||
http://www.springframework.org/schema/security/spring-security-3.1.xsd
|
||||
http://www.springframework.org/schema/beans
|
||||
http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">
|
||||
|
||||
<http security="none" pattern="/api/*/authentication" />
|
||||
|
||||
<http create-session="stateless" use-expressions="true" pattern="/api/**">
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" />
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" method="GET"/>
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" method="POST"/>
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" method="PUT"/>
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" method="DELETE"/>
|
||||
<intercept-url pattern="/api/**" access="isFullyAuthenticated()" method="HEAD"/>
|
||||
<http-basic />
|
||||
</http>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user