Re: [Acegisecurity-developer] Just starting
Greg Akins wrote: Thanks for responding. I was missing some "parts" of the config files.. I got everything cleared up so my web application starts (Yay!!). Now, the problem is.. I get a infinite redirect on web application. I'd image I screwed something up in the Controller setup (I'm not familiar with Spring MVC and am trying to incorporate this in a Struts app) and that is causing my problem. Sounds like your login URL is being protected by FilterSecurityInterceptor, which throws an AccessDeniedException/AuthenticationException and the wrapping SecurityEnforcementFilter re-directs you once more to the login URL. Try checking the debug-level log. Also check your login page URL is set to ROLE_ANONYMOUS (if using anonymous authentication) or it is excluded from the Ant/regular expression paths defined against FilterSecurityInterceptor. Ben --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] AuthorizeTag.java
Shishir K. Singh wrote: Could there be instances where currentUser.getAuthorities() returns null. If so, Arrays.asList(currentUser.getAuthorities()); will throw an exception. Most people use DaoAuthenticationProvider, and the corresponding UserDetails interface mandates getAuthorities() as non-null. However, Authentication.getAuthorities() is theoretically allowed return null under its interface contract, so we should handle this possibility. If you or Francois wish to check the taglibs for incorrect usage and send any patches, I'll be pleased to apply them. Ben --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer