Spring Security - Third Edition

Custom cookie and HTTP parameter names

Curious users may wonder if the expected value of the remember-me form field checkbox to be remember-me, or the cookie name to be remember-me, can be changed to obscure the use of Spring Security. This change can be made in one of two locations. Take a look at the following steps:

1. First, we can add additional methods to the rememberMe method, as follows:

        //src/main/java/com/packtpub/springsecurity/configuration/        SecurityConfig.java        http.rememberMe()               .key("jbcpCalendar")               .rememberMeParameter("jbcpCalendar-remember-me")               .rememberMeCookieName("jbcpCalendar-remember-me");

2. Additionally, now that we've declared our own RememberMeServices implementation as a Spring bean, we can simply define more properties ...