<!--security-context.xml -->
<http pattern="/resources/**" security="none"/>
<http use-expressions="true" entry-point-ref="authenticationEntryPoint">
<intercept-url pattern="/login.htm*" access="isAnonymous()" />
<intercept-url pattern="/*" access="isAuthenticated()" />
<form-login authentication-failure-url="/login.htm" />
<logout />
</http>
<authentication-manager alias="authenticationManager">
<authentication-provider user-service-ref="usuarioService">
<password-encoder ref="passwordEncoder" />
</authentication-provider>
</authentication-manager>
<!-- Login form ajax redirection -->
<beans:bean id="authenticationEntryPoint" class="com.dnp.security.impl.JsonAwareAuthenticationEntryPoint">
<beans:constructor-arg name="loginFormUrl" value="/login.htm" />
</beans:bean>
<!-- Password encoder -->
<beans:bean id="passwordEncoder" class="org.springframework.security.authentication.encoding.Md5PasswordEncoder" />
<!-- servlet-context.xml -->
<!-- Secure controller actions -->
<sec:global-method-security pre-post-annotations="enabled" />
<!-- Enables the Spring MVC @Controller programming model -->
<annotation-driven conversion-service="conversionService" />
<!-- Handles HTTP GET requests for /resources/** by efficiently serving up static resources in the ${webappRoot}/resources directory -->
<resources mapping="/resources/**" location="/resources/" />
<!-- Resolves views selected for rendering by @Controllers to .jsp resources in the /WEB-INF/views directory -->
<beans:bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
<beans:property name="prefix" value="/WEB-INF/views/" />
<beans:property name="suffix" value=".jsp" />
</beans:bean>
<context:component-scan base-package="com.dnp.web.controllers" />
<!-- Enable @Valid for @RequestBody -->
<beans:bean class="com.dnp.util.RequestBodyValidatorAspect" />
<!-- Flash service -->
<beans:bean id="flashService" class="com.dnp.service.impl.FlashServiceImpl" scope="session">
<aop:scoped-proxy proxy-target-class="false" />
</beans:bean>