Intro
Spring Security, formerly known as Acegi has reached its first milestone. The configuration is radically simplified. Here are my first steps.
New config file
The new config takes advantage of the spring namespace support. Unfortunately the schema is not yet published.
This code was copied from Ben Alex' blog http://blog.interface21.com/main/2007/12/06/whats-new-in-spring-security-2/ entry about Spring Security. Unfortunately it does not work properly. I get the following exception in Firefox:
The page isn't redirecting properly
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.
I had this problem with Acegi as well and solved it by excluding login.jsp from authentication. I was hoping the framework is by now clever enough to not protect its own login page 
.
Labels: