Files
sailing-analytics/java/com.sap.sse.security/shiro.ini
T

48 lines
1.6 KiB
INI

[main]
#shiro.loginUrl = /security/ui/Login.html
#shiro.successUrl = /UserManagement.html
# Use Built-in Chache Manager
credentialsMatcher = org.apache.shiro.authc.credential.Sha256CredentialsMatcher
# base64 encoding, not hex in this example:
credentialsMatcher.storedCredentialsHexEncoded = false
credentialsMatcher.hashIterations = 1024
upRealm = com.sap.sse.security.UsernamePasswordRealm
upRealm.credentialsMatcher = $credentialsMatcher
oauthRealm = com.sap.sse.security.OAuthRealm
securityManager.realms = $upRealm, $oauthRealm
sessionManager = com.sap.sse.security.SecurityWebSessionManager
securityManager.sessionManager = $sessionManager
#globalCookie = com.sap.sse.security.GlobalCookie
#securityManager.sessionManager.sessionIdCookie = $globalCookie
authc = com.sap.sse.security.CustomFilter
authc.loginUrl = /security/ui/Login.html
authc.successUrl = /UserManagement.html
sessionDAO = org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO
securityManager.sessionManager.sessionDAO = $sessionDAO
cacheManager = com.sap.sse.security.SessionCacheManager
securityManager.cacheManager = $cacheManager
#securityManager.sessionMode = native
[urls]
# The /login.jsp is not restricted to authenticated users (otherwise no one could log in!), but
# the 'authc' filter must still be specified for it so it can process that url's
# login submissions. It is 'smart' enough to allow those requests through as specified by the
# shiro.loginUrl above.
#/security/ui/UserManagement.html = authc
#/ui/UserManagement.html = authc
/Login.html = anon
#/../../service/** = anon
#/UserManagement.html = authc