Announcement Announcement Module
Collapse
No announcement yet.
Getting WARNING while using custom filters Page Title Module
Move Remove Collapse
X
Conversation Detail Module
Collapse
  • Filter
  • Time
  • Show
Clear All
new posts

  • Getting WARNING while using custom filters

    Code:
    <security:http pattern="/login/securityLogin.jsp*" security="none"/>
    <security:http pattern="/images/**" security="none"/>
    <security:http pattern="/scripts/**" security="none"/>
    <security:http pattern="/css/**" security="none"/>
    <security:http pattern="/error/**" security="none"/>
    <security:http pattern="/login/TerminalAjax.jsp*" security="none"/>
    
    <security:http auto-config="false" entry-point-ref="authenticationEntryPoint" >
    <security:intercept-url pattern="/**"/>
    <security:custom-filter ref="concurrentSessionFilter" position="FIRST"/>
    <security:custom-filter ref="securityContextPersistenceFilter" after="CONCURRENT_SESSION_FILTER"/>
    <security:custom-filter ref="logoutFilter" after="SECURITY_CONTEXT_FILTER"/>
    <security:custom-filter ref="simpleSSOFilter" before="X509_FILTER"/> 
    <security:custom-filter ref="authenticationProcessingFilter" after="LOGOUT_FILTER"/>
    <security:custom-filter ref="securityContextHolderAwareRequestFilter" after="FORM_LOGIN_FILTER"/> 
    <security:custom-filter ref="rememberMeAuthenticationFilter" after="SERVLET_API_SUPPORT_FILTER"/>
    <security:custom-filter ref="anonymousAuthenticationFilter" after="REMEMBER_ME_FILTER"/> 
    <security:custom-filter ref="exceptionTranslationFilter" after="ANONYMOUS_FILTER"/> 
    <security:custom-filter ref="filterSecurityInterceptor" after="EXCEPTION_TRANSLATION_FILTER"/>
    </security:http>
    this is from my applicationContext-security.xml

    I'm getting this following WARNING
    Code:
    INFO [org.springframework.security.config.http.DefaultFilterChainValidator] (MSC service thread 1-2) Checking whether login URL '/login/securityLogin.jsp' is accessible with your configuration
    20:07:37,701 WARN [org.springframework.security.config.http.DefaultFilterChainValidator] (MSC service thread 1-2) Possible error: Filters at position 1 and 2 are both instances of org.springframework.security.web.context.SecurityContextPersistenceFilter
    20:07:37,702 WARN [org.springframework.security.config.http.DefaultFilterChainValidator] (MSC service thread 1-2) Possible error: Filters at position 6 and 8 are both instances of org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
    20:07:37,702 WARN [org.springframework.security.config.http.DefaultFilterChainValidator] (MSC service thread 1-2) Possible error: Filters at position 12 and 14 are both instances of org.springframework.security.web.access.ExceptionTranslationFilter
    20:07:37,702 WARN [org.springframework.security.config.http.DefaultFilterChainValidator] (MSC service thread 1-2) Possible error: Filters at position 15 and 16 are both instances of org.springframework.security.web.access.intercept.FilterSecurityInterceptor

  • #2
    Hi,

    Were you able to find the reason of the warning? I have the same problem with different filters and really need your help.

    Thank you.

    Comment


    • #3
      The message says it all really. You shouldn't normally be adding any of those filters to the <http> filter chain yourself, since they are normally included automatically. A duplicate of any of the standard filters is most likely a configuration error.

      Comment

      Working...
      X