|
|
|
@ -130,6 +130,12 @@
|
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" />
|
|
|
|
|
<security:expression-handler ref="oauthWebExpressionHandler" />
|
|
|
|
|
</security:http>
|
|
|
|
|
|
|
|
|
|
<security:http pattern="/#{T(org.mitre.uma.web.AuthorizationRequestEndpoint).URL}/**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="never">
|
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" />
|
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" />
|
|
|
|
|
<security:expression-handler ref="oauthWebExpressionHandler" />
|
|
|
|
|
</security:http>
|
|
|
|
|
|
|
|
|
|
<security:http pattern="/#{T(org.mitre.openid.connect.web.UserInfoEndpoint).URL}**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="stateless">
|
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" />
|
|
|
|
|