social-security xmls

security conif

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context"
    xmlns:mvc="http://www.springframework.org/schema/mvc"
    xmlns:security="http://www.springframework.org/schema/security"
    xmlns:p="http://www.springframework.org/schema/p"
    xmlns:c="http://www.springframework.org/schema/c"
    xmlns:aop="http://www.springframework.org/schema/aop"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd
        http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-4.0.xsd
        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-4.0.xsd
        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd">


    <security:http pattern="/resources/**" security="none"/>

    <!-- use-expression=true allows you to define access rights using methods from SecurityExpressionRoot ...-->
    <security:http auto-config="true" use-expressions="true">

        <security:intercept-url pattern="/login" access="permitAll"/>
        <security:intercept-url pattern="/logout" access="permitAll" />
        <security:intercept-url pattern="/public/**" access="permitAll" />
        <security:intercept-url pattern="/user/signup" access="permitAll" />
        <security:intercept-url pattern="/business/signup" access="permitAll" />

        <security:intercept-url pattern="/home" access="hasRole('ROLE_SITE_ADMIN')" />
        <security:intercept-url pattern="/admin/**" access="hasRole('ROLE_SITE_ADMIN')" />

        <security:intercept-url pattern="/logged" access="hasAnyRole('ROLE_SITE_ADMIN','ROLE_COMPANY_ADMIN','ROLE_COMPANY_PROSPECT','ROLE_USER')" />
        <security:intercept-url pattern="/business/**" access="hasAnyRole('ROLE_SITE_ADMIN','ROLE_COMPANY_ADMIN','ROLE_COMPANY_PROSPECT')" />
        <security:intercept-url pattern="/user/**" access="hasAnyRole('ROLE_SITE_ADMIN','ROLE_COMPANY_ADMIN','ROLE_USER')" />


        <security:form-login login-page="/login" default-target-url="/logged" authentication-failure-url="/login?errorLogin"/>
        <security:logout logout-url="/logout" logout-success-url="/" />
        <security:access-denied-handler error-page="/403"/>

    </security:http>


    <bean id="socialAuthenticationFilter" class="org.springframework.social.security.SocialAuthenticationFilter"
        c:_0-ref="authenticationManager"
        c:_1-ref="userIdSource"
        c:_2-ref="usersConnectionRepository"
        c:_3-ref="connectionFactoryLocator"
        p:signupUrl="/lbs-subscriber-portal/access/user/signup"/>

    <!-- Defining our custom authentication provider -->
    <security:authentication-manager alias="authenticationManager">
        <security:authentication-provider user-service-ref="repositoryBasedUserDetailsService">
                <security:password-encoder hash="md5"/>
        </security:authentication-provider>

        <!-- Spring Social Security authentication provider -->
        <security:authentication-provider ref="socialAuthenticationProvider" />

    </security:authentication-manager>

    <!--
    <bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder">
        <constructor-arg index="0" value="10"/>
    </bean> -->


</beans>

social config

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xmlns:context="http://www.springframework.org/schema/context"
       xmlns:twitter="http://www.springframework.org/schema/social/twitter"
       xmlns:social="http://www.springframework.org/schema/social"
       xmlns:facebook="http://www.springframework.org/schema/social/facebook"
       xmlns:aop="http://www.springframework.org/schema/aop"
       xmlns:util="http://www.springframework.org/schema/util"
       xmlns:p="http://www.springframework.org/schema/p"
       xmlns:c="http://www.springframework.org/schema/c"
       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
       http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd
       http://www.springframework.org/schema/social http://www.springframework.org/schema/social/spring-social.xsd
       http://www.springframework.org/schema/social/twitter http://www.springframework.org/schema/social/spring-social-twitter.xsd
       http://www.springframework.org/schema/social/facebook http://www.springframework.org/schema/social/spring-social-facebook.xsd
       http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-4.0.xsd
       http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-4.0.xsd">

    <aop:aspectj-autoproxy proxy-target-class="true"/>


    <facebook:config app-id="${facebook.app.id}" app-secret="${facebook.app.secret}" app-namespace="openreliclbs" />

    <bean id="textEncryptor" class="org.springframework.security.crypto.encrypt.Encryptors" factory-method="noOpText" />

    <bean id="usersConnectionRepository" class="org.springframework.social.connect.jdbc.JdbcUsersConnectionRepository">
        <constructor-arg ref="dataSource" />
        <constructor-arg ref="connectionFactoryLocator" />
        <constructor-arg ref="textEncryptor" />
    </bean>

    <bean id="connectionRepository" factory-method="createConnectionRepository" factory-bean="usersConnectionRepository" scope="request">
        <constructor-arg value=" #{request.getParameter('username')} " />
        <aop:scoped-proxy proxy-target-class="false" />
    </bean>

    <bean class="org.springframework.social.connect.web.ConnectController" p:applicationUrl="${application.url}"/>

    <bean id="userIdSource" class="org.springframework.social.security.AuthenticationNameUserIdSource" />

    <bean id="socialUsersDetailService" class="com.openrelic.lbs.subscriber.portal.social.security.SimpleSocialUsersDetailService"
        c:_-ref="repositoryBasedUserDetailsService" />

    <bean id="socialAuthenticationProvider" class="org.springframework.social.security.SocialAuthenticationProvider"
        c:_0-ref="usersConnectionRepository"
        c:_1-ref="socialUsersDetailService" />

    <bean id="psc" class="org.springframework.social.connect.web.ProviderSignInController" autowire="constructor" />
    <bean id="signInAdapter" class="com.openrelic.lbs.subscriber.portal.social.config.SimpleSignInAdapter" autowire="constructor" />


</beans>