PROBLEM
Security is an important part of a web application, and Spring Security provides a set of security services that integrate with Spring-based applications. Spring Security offers a lot of options, but it can be difficult to quickly get a project bootstrapped with Spring Security.
SOLUTION
Skyway Builder Standard Edition has a development accelerator for bootstrapping a project with Spring Security.
HOW IT WORKS
Here are the steps for using the Spring Security scaffolding:
Steps for scaffolding Spring Security:
Right-click on the Spring DSL project, and select Scaffolding --> Scaffold Spring Security
Select a model package to store the Spring Security artifacts
Skyway Builder will configure the application for Spring Security, which includes:
Spring Security scaffolding:
Create a User domain object and UserDAO for storing user credentials. These artifacts can be further customized using Spring DSL if needed.
Create a Authorities domain object and AuthoritiesDAO for storing authorization data. These artifacts can be further customized using Spring DSL if needed.
Enable Spring security in the Security Settings section of the Enterprise Configuration tab.
Configure Secured URLs in the Security Settings section of the Enterprise Configuration tab.
Configure Secured Services in the Security Settings section of the Enterprise Configuration tab.
Configure Secured Data Access Objects in the Security Settings section of the Enterprise Configuration tab.
Configure Security Views in the Security Settings section of the Enterprise Configuration tab, including login, login success, login failure, logout success, and access denied views.
Configure Security Information Sources in the Security Settings section of the Enterprise Configuration tab, including database configuration with queries for AuthoritiesDAO and UserDAO.
Create dedicated Spring Security context files: project-security-context.xml, generated-project-security-context.xml
While Skyway Builder can fully setup Spring Security in a project with a few seconds, the configuration is setup to enable further customization using Spring DSL. See Securing Applications - Authentication and Securing Applications - Authorization.
RELATED RECIPES