Question

我在tomcat上使用spring基本身份验证。

当我在WebLogic 12c上加载应用程序时，它突然停止工作，一些研究建议我将<enforce-valid-basic-auth-credentials>false</enforce-valid-basic-auth-credentials>放在域的config.xml文件中以阻止WebLogic拦截AUTHENTICATE标头。

如果我通过IP地址访问

，它现在有效

//basic spring authentication works
http://123.456.789.111/mycontext

但不是通过localhost

//can no longer login to the application
http://localhost/mycontext

有谁知道如何解决这个问题？

更新 - 弹簧安全配置

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security" 
       xmlns:beans="http://www.springframework.org/schema/beans" 
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

  <http pattern="/resources/**" security="none"/>
  <http pattern="/404" security="none"/>

  <http auto-config="true">

        <intercept-url pattern="/login"  access="IS_AUTHENTICATED_ANONYMOUSLY" />
        <intercept-url pattern="/logout" access="IS_AUTHENTICATED_ANONYMOUSLY" />
        <intercept-url pattern="/endpoints/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
        <intercept-url pattern="/**" access="ROLE_USER" />

        <logout logout-success-url="/logout"/>
        <form-login
           login-page="/login"
           authentication-failure-url="/login?login_error=1"
           default-target-url="/dashboard" 
           always-use-default-target='true'/>
  </http>



  <authentication-manager alias="authenticationManager">
    <authentication-provider>
      <user-service>
        <user name="test" password="pass" authorities="ROLE_USER" />
      </user-service>
    </authentication-provider>
  </authentication-manager>

</beans:beans>

Weblogic - Spring身份验证（通过IP地址工作但不通过localhost工作）

0 个答案: