Hi! I am enabling a simple HTTP Basic Authentication with Spring security in my project. My environment is an Glassfish Server (bundled with Netbeans), and almost everything works perfect: I have set up it to just ask for authentication with
the POST method, with hardcoded users with "user-service", and it works with user names with no
special characters.
The problem comes when I set up an user with "@" or "." Here is
the spring-security related part of my servlet.xml:
<security:http>
<security:intercept-url method="POST" pattern="/**" access="ROLE_USER" />
<security:http-basic/>
</security:http>
<security:authentication-manager alias="authenticationManager">
<security:authentication-provider user-service-ref="uservice"/>
</security:authentication-manager>
<security:user-service id="uservice">
<security:user name="
[email protected]" password="pswd1" authorities="ROLE_USER" />
<security:user name="
[email protected]" password="pswd2" authorities="ROLE_USER" />
<security:user name="pepe" password="pepito" authorities="ROLE_USER" />
</security:user-service>
I have looked also for what did
the browser send to
the listening port, and it sends right
the par "username:password" in base 64, so i think
the problem is in my server(Glassfish v3).
Does anyone have any idea?
Thanks in advance!
Raspayu
