zk 6.0.1 and Spring Security 3.0.7 problem - can't find org/springframework/security/util/UrlMatcher

answered 2012-08-01 14:14:06 +0800

parlante
48

Hi Hawk,

Thanks for the feedback.

I tried your suggestion and get the following exception. It can't find the namespace http://www.zkoss.org/2008/zkspring/security

Context initialization failed
org.springframework.beans.factory.parsing.BeanDefinitionParsingException: Configuration problem: Unable to locate Spring NamespaceHandler for XML schema namespace [http://www.zkoss.org/2008/zkspring/security]
Offending resource: class path resource [applicationContext-security.xml]

Here is my complete applicatoinContext-security.xml. It's such a small file I figured I'd post it and hopefully somebody can see an obvious thing. Thanks in advanced for any help.

<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:zksp="http://www.zkoss.org/2008/zkspring/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:context="http://www.springframework.org/schema/context"
xmlns:aop="http://www.springframework.org/schema/aop"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
http://www.zkoss.org/2008/zkspring/security
http://www.zkoss.org/2008/zkspring/security/zkspring-security.xsd
http://www.zkoss.org/2008/zkspring
http://www.zkoss.org/2008/zkspring/zkspring.xsd
http://www.zkoss.org/2008/zkspring/core
http://www.zkoss.org/2008/zkspring/core/zkspring-core.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.0.xsd">

<!-- Enable the @Secured annotation to secure service layer methods. -->
<global-method-security secured-annotations="enabled" />

<!-- Secure the pages using the URL pattern. -->
<http auto-config="true" use-expressions="true" access-denied-page="/authentication/denied.zul" >

<intercept-url pattern="/authentication/login.zul" access="permitAll"/>
<intercept-url pattern="/administration" access="hasRole('ROLE_ADMIN')"/>
<intercept-url pattern="/parlante/main/common" access="hasRole('ROLE_USER')"/>

<form-login
login-page="/authentication/login.zul"
authentication-failure-url="/authentication/login.zul?error=true"
default-target-url="/parlante/main/common"/>

<logout
invalidate-session="true"
logout-success-url="/authentication/login.zul"
logout-url="/authentication/logout.zul"/>

</http>

<!-- Declare an authentication-manager to use a custom userDetailsService. -->
<authentication-manager>
<authentication-provider user-service-ref="customUserDetailsService">
<password-encoder ref="passwordEncoder"/>
</authentication-provider>
</authentication-manager>

<!-- Use a Md5 encoder since the user's passwords are stored as Md5 in the database. -->
<beans:bean id="passwordEncoder" class="org.springframework.security.authentication.encoding.Md5PasswordEncoder"/>

<!-- A custom service where Spring will retrieve users and their corresponding access levels. -->
<beans:bean id="customUserDetailsService" class="com.tickertrack.service.BaseUserDetailService"/>

<!-- Secure the ZK event processing per the event name and ZK component path pattern. -->
<zksp:zk-event login-template-close-delay="5">
<zksp:intercept-event event="onClick" path="//*/header/login" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<zksp:intercept-event event="onClick" path="//*/header/register" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<zksp:intercept-event event="onClick" path="//*/register/save" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<zksp:intercept-event event="onClick" path="//*/register/cancel" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<zksp:intercept-event event="onClick" path="//*/login/*" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<zksp:intercept-event event="onClick" path="/**" access="ROLE_ADMIN, ROLE_USER"/>
<zksp:intercept-event path="/**" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
</zksp:zk-event>
</beans:beans>

answered 2012-08-01 14:32:07 +0800

parlante
48

I got it.

I totally overlooked the most obvious thing. Upgrading the actual ZK security library. The namespace you posted Hawk works like a charm once I did this. Thanks.