CSPACE-870 Integrated Spring Security 3.0.2.CI-SNAPSHOT and Spring 3.0.0.RELEASE. The JAAS-based CS identity provider (CSIP) is configured successfully as a JAAS authn provider in Spring Security. Added Spring security specific AuthorityGranter and UserDetailsService (test) into authn service.
Refactored DatabaseRealm and CSpaceJBossDBLoginModule (needs package change in login-config.xml of JBoss).
ant deploy is required to copy the Spring specific jars to cspace/lib (of cspace domain). See services/common/lib/README.txt
Spring security is enabled by default. Anonymous access is also enabled by default (allows all tests to run without HTTP basic auth). Security tests could be run with client side security enabled (no need to bounce the server)
A services/authentication/service/src/main/java/org/collectionspace/authentication/realm
A services/authentication/service/src/main/java/org/collectionspace/authentication/realm/CSpaceRealm.java
A + services/authentication/service/src/main/java/org/collectionspace/authentication/realm/CSpaceDbRealm.java
A services/authentication/service/src/main/java/org/collectionspace/authentication/spring
A services/authentication/service/src/main/java/org/collectionspace/authentication/spring/CSpaceUserDetailsService.java
A services/authentication/service/src/main/java/org/collectionspace/authentication/spring/CSpaceAuthorityGranter.java
D services/authentication/service/src/main/java/org/collectionspace/authentication/CSpaceJBossDBLoginModule.java
D services/authentication/service/src/main/java/org/collectionspace/authentication/DatabaseRealm.java
A services/authentication/service/src/main/java/org/collectionspace/authentication/jaas
A + services/authentication/service/src/main/java/org/collectionspace/authentication/jaas/CSpaceJBossDBLoginModule.java
M services/authentication/service/src/main/resources/config/jboss-login-config.xml
M services/authentication/service/pom.xml
M services/authentication/service/build.xml
M services/JaxRsServiceProvider/src/main/webapp/WEB-INF/web.xml
A services/JaxRsServiceProvider/src/main/webapp/WEB-INF/login.conf
A services/JaxRsServiceProvider/src/main/webapp/WEB-INF/applicationContext-security.xml
M services/JaxRsServiceProvider/pom.xml
M services/JaxRsServiceProvider/build.xml
A services/common/lib/spring
AM services/common/lib/spring/org.springframework.asm-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/org.springframework.jdbc-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/spring-security-web-3.0.2.CI-SNAPSHOT.jar
AM services/common/lib/spring/org.springframework.context-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/spring-security-acl-3.0.2.CI-SNAPSHOT.jar
AM services/common/lib/spring/org.springframework.beans-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/org.springframework.core-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/spring-security-config-3.0.2.CI-SNAPSHOT.jar
AM services/common/lib/spring/org.springframework.web-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/spring-security-core-3.0.2.CI-SNAPSHOT.jar
AM services/common/lib/spring/org.springframework.expression-3.0.0.BUILD-
20100208195804.jar
AM services/common/lib/spring/org.springframework.aop-3.0.0.BUILD-
20100208195804.jar
M services/common/lib/README.txt
M services/common/build.xml