<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:context="http://www.springframework.org/schema/context"
    xmlns:encryption="http://www.jasypt.org/schema/encryption"
    xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.jasypt.org/schema/encryption http://www.jasypt.org/schema/encryption/jasypt-spring31-encryption-1.xsd
        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd">


    <!-- Seguridad Administrador -->
    <security:http use-expressions="true" pattern="/admin/*"
        authentication-manager-ref="adminAuth">

        <security:intercept-url pattern="/admin/login" access="permitAll" />
        <security:intercept-url pattern="/admin" access="isAuthenticated()" />
        <security:intercept-url pattern="/admin/acercaDe" access="isAuthenticated()" />

        <!-- Denegar todos los mappings de los controladores -->
        <security:intercept-url pattern="/admin/**" access="denyAll" />

        <security:form-login login-page="/admin/login"
            authentication-failure-url="/admin/login?error=true"
            default-target-url="/admin" password-parameter="passAd"
            username-parameter="emailAd" login-processing-url="/login.do" />
    </security:http>

    <!-- Seguridad Cliente -->
    <security:http use-expressions="true" pattern="/**"
        authentication-manager-ref="clienteAuth">
        <security:intercept-url pattern="/" access="permitAll" />
        <security:intercept-url pattern="/login" access="permitAll" />
        <security:intercept-url pattern="/plantilla" access="isAuthenticated()" />

        <!-- Denegar todos los mappings de los controladores -->
        <security:intercept-url pattern="/**" access="denyAll" />

        <security:form-login login-page="/login"
            authentication-failure-url="/login?error=true"
            default-target-url="/" password-parameter="passCta"
            username-parameter="emailCta" login-processing-url="/doLoginCliente" />
    </security:http>

    <security:authentication-manager id="clienteAuth">
        <security:authentication-provider user-service-ref="customAdminUserDetailsService">
        </security:authentication-provider>
    </security:authentication-manager>

    <security:authentication-manager alias="adminAuth" >
        <security:authentication-provider user-service-ref="customClienteUserDetailsService">
        </security:authentication-provider>
    </security:authentication-manager>

    <bean id="customClienteUserDetailsService" class="com.cibaxo.config.CustomClienteUserDetailsService"></bean>
    <bean id="customAdminUserDetailsService" class="com.cibaxo.config.CustomAdminUserDetailsService"></bean>
</beans>

public class CustomClienteUserDetailsService implements UserDetailsService {

    @Autowired
    private CuentaWebClienteDao cuentaDao;

    @Override
    public UserDetails loadUserByUsername(String username)
            throws UsernameNotFoundException, DataAccessException {

        CuentaWebCliente cuenta = cuentaDao.getCuentaUserDetails(username);

        List<SimpleGrantedAuthority> auths = new java.util.ArrayList<SimpleGrantedAuthority>();
        auths.add(new SimpleGrantedAuthority(cuenta.getRolCta()));

        UserDetails user = new User(cuenta.getEmailCta(), cuenta.getPassCta(), auths);

        return user;
    }
}


public class CustomAdminUserDetailsService implements UserDetailsService {

    @Autowired
    private AdministradorDao administradorDao;

    @Override
    public UserDetails loadUserByUsername(String username)
            throws UsernameNotFoundException, DataAccessException, EmptyResultDataAccessException {

        Administrador admin = administradorDao.getAdministrador(username);

        List<SimpleGrantedAuthority> auths = new java.util.ArrayList<SimpleGrantedAuthority>();
        auths.add(new SimpleGrantedAuthority(admin.getRolAd()));

        UserDetails user = new User(admin.getEmailAd(), admin.getPassAd(), auths);
        return user;
    }

}