diff --git a/docs/manual/src/docs/asciidoc/index.adoc b/docs/manual/src/docs/asciidoc/index.adoc index c3914c11bd..c04d6576b1 100644 --- a/docs/manual/src/docs/asciidoc/index.adoc +++ b/docs/manual/src/docs/asciidoc/index.adoc @@ -5075,7 +5075,7 @@ Often a more complicated strategy than simple DN-matching is required to locate [[ldap-searchobjects-filter]] ===== FilterBasedLdapUserSearch -This bean uses an LDAP filter to match the user object in the directory. The process is explained in the Javadoc for the corresponding search method on thehttp://java.sun.com/j2se/1.4.2/docs/api/javax/naming/directory/DirContext.html#search(javax.naming.Name,%20java.lang.String,%20java.lang.Object[],%20javax.naming.directory.SearchControls)[JDK DirContext class]. As explained there, the search filter can be supplied with parameters. For this class, the only valid parameter is `{0}` which will be replaced with the user's login name. +This bean uses an LDAP filter to match the user object in the directory. The process is explained in the Javadoc for the corresponding search method on the http://java.sun.com/j2se/1.4.2/docs/api/javax/naming/directory/DirContext.html#search(javax.naming.Name,%20java.lang.String,%20java.lang.Object[],%20javax.naming.directory.SearchControls)[JDK DirContext class]. As explained there, the search filter can be supplied with parameters. For this class, the only valid parameter is `{0}` which will be replaced with the user's login name. [[ldap-authorities]] @@ -6289,7 +6289,9 @@ return new Callable() { More technically speaking, Spring Security integrates with `WebAsyncManager`. The `SecurityContext` that is used to process the `Callable` is the `SecurityContext` that exists on the `SecurityContextHolder` at the time `startCallableProcessing` is invoked. ==== -There is no automatic integration with a `DeferredResult` that is returned by controllers. This is because `DeferredResult` is processed by the users and thus there is no way of automatically integrating with it. However, you can still use <> to provide transparent integration with Spring Security. +There is no automatic integration with a `DeferredResult` that is returned by controllers. +This is because `DeferredResult` is processed by the users and thus there is no way of automatically integrating with it. +However, you can still use <> to provide transparent integration with Spring Security. [[mvc-csrf]] === Spring MVC and CSRF Integration @@ -6340,7 +6342,7 @@ Will output HTML that is similar to the following: ==== Resolving the CsrfToken Spring Security provides `CsrfTokenResolver` which can automatically resolve the current `CsrfToken` for Spring MVC arguments. -By using <> you will automatically have this added to your Spring MVC configuration. +By using <> you will automatically have this added to your Spring MVC configuration. If you use XML based configuraiton, you must add this yourself. Once `CsrfTokenResolver` is properly configured, you can expose the `CsrfToken` to your static HTML based application. @@ -8013,7 +8015,8 @@ Spring Security 4.0+ provides support for authorizing messages. One concrete exa [[nsa-websocket-message-broker]] ==== -The websocket-message-broker element has two different modes. If the <> is not specified, then it will do the following things: +The websocket-message-broker element has two different modes. +If the <> is not specified, then it will do the following things: * Ensure that any SimpAnnotationMethodMessageHandler has the AuthenticationPrincipalArgumentResolver registered as a custom argument resolver. This allows the use of `@AuthenticationPrincipal` to resolve the principal of the current `Authentication` * Ensures that the SecurityContextChannelInterceptor is automatically registered for the clientInboundChannel. This populates the SecurityContextHolder with the user that is found in the Message