From 3410d2c6ad38ebe9ab8514a922edcf73643e45d2 Mon Sep 17 00:00:00 2001
From: Justin Richer <jricher@mit.edu>
Date: Wed, 27 Nov 2013 11:24:20 -0500
Subject: [PATCH] added separate filter for authorization endpoint

---
 .../src/main/webapp/WEB-INF/user-context.xml          | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml b/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
index 4777fec3a..fe45bc816 100644
--- a/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
+++ b/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
@@ -41,6 +41,17 @@
 	<security:http pattern="/login**" use-expressions="true" entry-point-ref="http403EntryPoint">
 		<security:intercept-url pattern="/login**" access="permitAll"/>	
 	</security:http>
+	
+	<security:http disable-url-rewriting="true" use-expressions="true" pattern="/authorize"> 
+<!-- 		<security:intercept-url pattern="/authorize" access="IS_AUTHENTICATED_FULLY" /> -->
+		<security:form-login login-page="/login" authentication-failure-url="/login?error=failure" authentication-success-handler-ref="authenticationTimeStamper" />
+		<security:custom-filter ref="promptFilter" after="SECURITY_CONTEXT_FILTER" />
+		<security:logout logout-url="/logout" />
+		<security:anonymous />
+		<security:expression-handler ref="oauthWebExpressionHandler" />
+	</security:http>	
+
+
 
 	<security:http disable-url-rewriting="true" use-expressions="true"> 
 		<security:form-login login-page="/login" authentication-failure-url="/login?error=failure" authentication-success-handler-ref="authenticationTimeStamper" />