From e5b62e89351fe1dd7f7120ab93b8e90a1189a349 Mon Sep 17 00:00:00 2001
From: Justin Richer <jricher@mitre.org>
Date: Tue, 21 Aug 2012 14:02:35 -0400
Subject: [PATCH] fixed patterns and expressions on http blocks

---
 .../src/main/webapp/WEB-INF/application-context.xml       | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml b/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
index 36e6479cb..b06dacfdc 100644
--- a/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
+++ b/openid-connect-server/src/main/webapp/WEB-INF/application-context.xml
@@ -57,17 +57,17 @@
 	</security:http>
 
 	<!-- Allow open access to required endpoints -->
-	<security:http auto-config="true">
+	<security:http auto-config="true" pattern="/jwk**" use-expressions="true">
 		<security:intercept-url pattern="/jwk**" access="permitAll"/>
 	</security:http>
-	<security:http auto-config="true">
+	<security:http auto-config="true" pattern="/.well-known**" use-expressions="true">
 		<security:intercept-url pattern="/.well-known**" access="permitAll"/>
 	</security:http>
-	<security:http auto-config="true">
+	<security:http auto-config="true" pattern="/x509**" use-expressions="true">
 		<security:intercept-url pattern="/x509**" access="permitAll"/>	
 	</security:http>
 
- 	<security:http auto-config="true" pattern="/userinfo**">
+ 	<security:http auto-config="true" pattern="/userinfo**" use-expressions="true">
 		<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" />
 		<security:expression-handler ref="oauthWebExpressionHandler" />
 	</security:http>