<?xml version="1.0" encoding="UTF-8"?>
<!--
  - Application context containing authentication, channel
  - security and web URI beans.
  -
  - Only used by "filter" artifact.
  -
  -->

<b:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:b="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

    
      
     <http security="none" pattern="/**/*.html"  />
     <http security="none" pattern="/css/**"  />
     <http security="none" pattern="/images/**" />
     <http security="none" pattern="/js/**" />
	 <http security="none" pattern="/help/en/**" />
	 <http security="none" pattern="/userguide/en/**" />

    <http realm="DT Realm" entry-point-ref="restEntryPoint" access-decision-manager-ref="dtAccessDecisionMgr" disable-url-rewriting="false" create-session="always">
     <intercept-url pattern="/" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
     <intercept-url pattern="/index.html" access="IS_AUTHENTICATED_ANONYMOUSLY" />
     <intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY" />

       
         <custom-filter position="PRE_AUTH_FILTER" ref="oamFilter" />
        <!--  <form-login authentication-success-handler-ref="restSessionInfoOnAuthenticationHandler" authentication-failure-handler-ref="restLoginExceptionHandler"  login-processing-url="/dtlogin" /> --> 
        <!--   <http-basic/> -->
        <logout  logout-url="/dtlogout" success-handler-ref="dtLogoutHandler" />
       <!--  <remember-me /> -->
    </http>
    
   <b:bean id="restSessionInfoOnAuthenticationHandler" class="com.informatica.cep.design.application.security.web.SessionInfoOnAuhtenicationSuccessHandler"/>
   <b:bean id="dtPwdEnc" class="org.springframework.security.crypto.password.StandardPasswordEncoder" />

    <authentication-manager alias="dtAuthProvider">
    		<authentication-provider ref="preauthAuthProvider"/>
    </authentication-manager>
    
	
	
	<!--  for pre-auth - start -->
	 <b:bean id="oamFilter"
	class="com.informatica.cep.design.custom.application.security.web.OAMAuthenticationFilter">
	<b:property name="authenticationManager" ref="dtAuthProvider" />
   </b:bean>

	<b:bean id="preauthAuthProvider"
		class="org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider">
		<b:property name="preAuthenticatedUserDetailsService">
			<b:bean id="userDetailsServiceWrapper"
				class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
				<b:property name="userDetailsService" >
				 <b:bean class="com.informatica.cep.design.custom.application.security.web.PAUserDetailsServiceImpl"/>
				</b:property>
			</b:bean>
		</b:property>
	</b:bean>
	
	<!--  for pre-auth - end -->
	
    <b:bean id="restEntryPoint"  class="org.springframework.security.web.authentication.Http403ForbiddenEntryPoint"/>
    
    <b:bean id="restLoginExceptionHandler" class="com.informatica.cep.design.application.security.web.Http401ExceptionHandler"/>
    
    <b:bean id="dtAccessDecisionMgr" class="org.springframework.security.access.vote.AffirmativeBased">
    <b:constructor-arg>
      <b:list>
        <b:bean class="org.springframework.security.access.vote.AuthenticatedVoter"/>
        <b:bean class="org.springframework.security.access.vote.RoleVoter">
        <b:property name="rolePrefix" value="PRIV_"/>
        </b:bean>
      </b:list>
    </b:constructor-arg>
    </b:bean>
    
    <b:bean id="dtLogoutHandler" class="com.informatica.cep.design.application.security.web.NonRedirectingLogoutSucessHandler"/>

    <!-- Automatically receives AuthenticationEvent messages -->
    <b:bean id="loggerListener" class="org.springframework.security.authentication.event.LoggerListener"/>
    
   
</b:beans>