Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-01 15:57:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-2131: Update doc to state session authentication sends 401 if no page

Browse Source
This commit is contained in:
Rob Winch
2013-08-25 11:37:23 -05:00
parent cd7055f725
commit 18bd82e7d4
6 changed files with 2153 additions and 1493 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc
+1 -1
View File
@@ -524,7 +524,7 @@ session-management.attlist &=
## Allows injection of the SessionAuthenticationStrategy instance used by the SessionManagementFilter
attribute session-authentication-strategy-ref {xsd:token}?
session-management.attlist &=
## Defines the URL of the error page which should be shown when the SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (402) error code will be returned to the client. Note that this attribute doesn't apply if the error occurs during a form-based login, where the URL for authentication failure will take precedence.
## Defines the URL of the error page which should be shown when the SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (401) error code will be returned to the client. Note that this attribute doesn't apply if the error occurs during a form-based login, where the URL for authentication failure will take precedence.
attribute session-authentication-error-url {xsd:token}?
config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd
+2148 -1488
View File
File diff suppressed because it is too large Load Diff
config/src/main/resources/org/springframework/security/config/spring-security-3.2.rnc
+1 -1
View File
@@ -524,7 +524,7 @@ session-management.attlist &=
## Allows injection of the SessionAuthenticationStrategy instance used by the SessionManagementFilter
attribute session-authentication-strategy-ref {xsd:token}?
session-management.attlist &=
## Defines the URL of the error page which should be shown when the SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (402) error code will be returned to the client. Note that this attribute doesn't apply if the error occurs during a form-based login, where the URL for authentication failure will take precedence.
## Defines the URL of the error page which should be shown when the SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (401) error code will be returned to the client. Note that this attribute doesn't apply if the error occurs during a form-based login, where the URL for authentication failure will take precedence.
attribute session-authentication-error-url {xsd:token}?
config/src/main/resources/org/springframework/security/config/spring-security-3.2.xsd
+1 -1
View File
@@ -1702,7 +1702,7 @@
<xs:attribute name="session-authentication-error-url" type="xs:token">
<xs:annotation>
<xs:documentation>Defines the URL of the error page which should be shown when the
SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (402) error
SessionAuthenticationStrategy raises an exception. If not set, an unauthorized (401) error
code will be returned to the client. Note that this attribute doesn't apply if the error
occurs during a form-based login, where the URL for authentication failure will take
precedence.