November 2017
Intermediate to advanced
542 pages
14h 24m
English
Since X509AuthenticationFilter will continue processing the request if authentication fails, we'll need to handle situations where the user does not authenticate successfully and has requested a protected resource. The way that Spring Security allows developers to customize this is by plugging in a custom o.s.s.web.AuthenticationEntryPoint implementation. In a default form login scenario, LoginUrlAuthenticationEntryPoint is used to redirect the user to a login page if they have been denied access to a protected resource and are not authenticated.
In contrast, in typical client certificate authentication environments, alternative methods of authentication are simply not supported ...
Read now
Unlock full access