如何实现Spring Security“摘要式身份验证”
任何人都可以告诉我如何使用 Spring Security“摘要式身份验证”对我的客户端应用程序进行身份验证并维持该会话直到注销。 我的客户端不是表单基础客户端,而是休息基础客户端,这意味着我想使用休息请求对我的客户端进行身份验证,并维护某些事务的会话并使用客户端的休息基础请求注销。谢谢。
Can any one please tell me how can I once authenticate my client application with Spring Security "Digest Authentication" and maintain that session until log-out.
My client is not a form base one it was Rest base one, that mean I want to authenticate my client with Rest request and maintain the session for some transaction and log-out with client's Rest base request. Thanks.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
当然,Web 服务不是基于会话实现的,因此您可能希望在每次请求时将凭证移交给服务器。您可以轻松地禁用 spring security 命名空间中的会话。
对于数字身份验证,请查看手册: http://static.springsource.org/spring-security/site/docs/3.0.x/reference/basic.html#digest-processing-filter
Naturally Web Services are not implemented session based, so you might weant to hand over ther credential to the server at each request. You can easily disable sessions in the namespace of spring security.
For digit authentication please have a look at the manual: http://static.springsource.org/spring-security/site/docs/3.0.x/reference/basic.html#digest-processing-filter