From 87ba87160549535f9557c064f571de56221db68c Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Wed, 28 May 2008 13:38:33 +0000 Subject: [PATCH] Minor doc updates --- src/docbkx/common-auth-services.xml | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/src/docbkx/common-auth-services.xml b/src/docbkx/common-auth-services.xml index 35fb988462..7df31f778a 100644 --- a/src/docbkx/common-auth-services.xml +++ b/src/docbkx/common-auth-services.xml @@ -6,13 +6,13 @@ Mechanisms, Providers and Entry Points - If you're using Spring Security-provided authentication - approaches, you'll usually need to configure a web filter, together + To use Spring Security's authentication services, + you'll usually need to configure a web filter, together with an AuthenticationProvider and AuthenticationEntryPoint. In this section we are going to explore an example application that needs to support both - form-based authentication (ie so a nice HTML page is presented to a - user for them to login) plus BASIC authentication (ie so a web service + form-based authentication (so a nice HTML page is presented to a + user for them to login) and BASIC authentication (so a web service or similar can access protected resources). In the web.xml, this application will need a single Spring @@ -236,7 +236,9 @@ UserDetailsService interfaces. The contract for this latter interface consists of a single method: - public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException, DataAccessException; + + UserDetails loadUserByUsername(String username) throws UsernameNotFoundException, DataAccessException; + The returned UserDetails is an interface that provides getters that guarantee non-null provision of basic @@ -245,7 +247,7 @@ authentication providers will use a UserDetailsService, even if the username and password are not actually used as part of the authentication decision. - Generally such provider will be using the returned + Generally such providers will be using the returned UserDetails object just for its GrantedAuthority[] information, because some other system (like LDAP or X509 or CAS etc) has undertaken the