Questions tagged [pre-authentication]

78 questions
0
votes
1 answer

Springboot @PreAuthorize conflict with @EnableTransactionManagement

I know this sound a bit weird but we run into an issue that when we add @EnableTransactionManagement in the application, all the controllers with @PreAuthorize are not accessible, the swagger cannot discover it and calling the API (with correct…
Frank
  • 569
  • 2
  • 6
  • 14
0
votes
1 answer

Spring boot micro services with pre-Authenticated filter using CSRF protection

I am using SSO and preAuthenticated Filter in my micro services. Micro services are built using spring boot and are stateless in nature. How can I apply CSRF protection across all micro services using spring security. Please let me know if any…
0
votes
1 answer

Consume Organization.svc with SOAP authentication with Web Application Proxy

We have a CRM Dynamics 2016 onpremise (IFD configured), we access to the CRM from a Cordova mobile application via SOAP authentication and consume the service "Organization.svc" to get or set Data: everything works fine until now. After adding a Web…
Samy
  • 1
  • 1
0
votes
0 answers

not hit default page after Single sign on preauthentication filter(Apache+Tomcat+SpringSecurity)

I have one working Spring web application deployed on tomcat, using Spring Security to do authentication and authorization. My new requirement is using SSO via apache http request to tomcat. I got this working using the preauthentication filter and…
Kevin
  • 69
  • 1
  • 7
0
votes
3 answers

spring security : make a mysql authentication

I have an issue with Spring Security. I'm trying to make an authentication with a mysql data checking. I'm using AngularJs, Spring Boot and Spring Security. I have a webservice rest which is called by $http.post(...). When I launch my app, and if I…
0
votes
2 answers

Spring Security Pre-Authentication / Login

I did a proof of concept with Spring Security in order to perform pre authentication by using the PRE_AUTH_FILTER filter. It worked OK, but I'd like to know if I can redirect to the login page if the this filter does not work, because I get HTTP…
Luis
  • 41
  • 4
0
votes
1 answer

@PreAuthorize annotation in Spring Security doesn't work. Might be misconfigured .xml file

I'm using Spring Security (Spring Boot app) with AngularJS, and I'm trying to allow/deny access to specific mappings based on user's granted authorities. User.java public class User implements UserDetails { ... private String username; …
zkristic
  • 629
  • 1
  • 9
  • 24
0
votes
1 answer

Spring Security AnonymousAuthFilter With PreAuthenticationFilter Allowing Unauthorized Requests

I have a fairly simplistic Spring Security configuration in my Spring MVC web app. I am receiving REST requests from a remote web application that get authenticated through my preauth filter. I simply look for a header in the request, and if…
Bal
  • 2,027
  • 4
  • 25
  • 51
0
votes
1 answer

Spring Security - Preauthentication - Authorization and Set Roles Defined in DB

The authentication for our application happens through siteminder agent but the authorization is controlled through our application. I am using org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter to check the…
Sanjeev
  • 119
  • 4
  • 18
0
votes
1 answer

Spring Security dynamic Access Evaluator

i Want that Spring security can block accces to dynamic URL changes http://domain.com//** shareURL is a ID, the problem i have is that if i access with shareID 1,the program tell me i need to login(ALL OK) but when if i logged try to run shareID 2,…
0
votes
1 answer

Spring Web Service Pre Authentication Filter Map Roles

I am trying to configure pre authentication for my spring web service with tomcat authentication. I tried pre-auth spring sample and configured my applicationContext-security.xml like below to use default spring configuration.
0
votes
1 answer

Grails Spring Security Failed Password Attempt

Is there a way to retrieve user entered password in spring security core grails plugin when the authentication fails in the action authfail of LoginController? def authfail = { def msg = '' // I can get the username as below def username =…
zdesam
  • 2,936
  • 3
  • 25
  • 32
0
votes
1 answer

Spring security with multiple custom filters and roles

I am using Spring security with two filters: - One filter for x.509 authentication for client certificates. All his filter does is extracts the username from certificate into principle. - One filter to do header based authentication. The header…
MickJ
  • 2,127
  • 3
  • 20
  • 34
0
votes
1 answer

How to integrate paypal preauth in iphone app?

I am able to integrate pay-pal preauthorize functionality payment forms on my website using the name value hidden variable payment-action=authorization . How can I achieve this pay-pal preauthorize functionality for my iPhone app? What is the…
rahul cod
  • 23
  • 2
0
votes
2 answers

Several SecurityContexts in one HttpSession

I have been working on application that is using spring security. I am quite new to spring security and ended up with problem similar to this and this. But it is a bit different. I do manual authentication this way:…