This is an automated email from the ASF dual-hosted git repository. asf-gitbox-commits pushed a commit to branch atlas-2.6 in repository https://gitbox.apache.org/repos/asf/atlas.git
commit 66b33ddb1b8b76771d88fa4acd8ef2f3c083a0dc Author: Aditya Gupta <[email protected]> AuthorDate: Fri Jul 17 11:06:09 2026 +0530 ATLAS-5158: Remove unused Spring Security XML configuration (#483) --- webapp/src/main/resources/spring-security.xml | 110 -------------------------- 1 file changed, 110 deletions(-) diff --git a/webapp/src/main/resources/spring-security.xml b/webapp/src/main/resources/spring-security.xml deleted file mode 100644 index 3d2d55bec4..0000000000 --- a/webapp/src/main/resources/spring-security.xml +++ /dev/null @@ -1,110 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!-- Licensed to the Apache Software Foundation (ASF) under one or more contributor - license agreements. See the NOTICE file distributed with this work for additional - information regarding copyright ownership. The ASF licenses this file to - You under the Apache License, Version 2.0 (the "License"); you may not use - this file except in compliance with the License. You may obtain a copy of - the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required - by applicable law or agreed to in writing, software distributed under the - License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS - OF ANY KIND, either express or implied. See the License for the specific - language governing permissions and limitations under the License. --> - -<beans:beans xmlns="http://www.springframework.org/schema/security"; - xmlns:beans="http://www.springframework.org/schema/beans"; - xmlns:security="http://www.springframework.org/schema/security"; - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; - xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd - http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd";> - - <!-- This XML is no longer being used, @see AtlasSecurityConfig for the equivalent java config --> - - <security:http pattern="/login.jsp" security="none" /> - <security:http pattern="/error.jsp" security="none" /> - <security:http pattern="/css/**" security="none" /> - <security:http pattern="/img/**" security="none" /> - <security:http pattern="/libs/**" security="none" /> - <security:http pattern="/js/**" security="none" /> - <security:http pattern="/ieerror.html" security="none" /> - <security:http pattern="/api/atlas/admin/status" security="none" /> - <security:http pattern="/api/atlas/admin/metrics" security="none" /> - <security:http pattern="/apidocs/**" security="none" /> - - <security:http create-session="always" - entry-point-ref="entryPoint"> - <security:session-management - session-fixation-protection="newSession" /> - <intercept-url pattern="/**" access="isAuthenticated()" /> - <security:custom-filter position="PRE_AUTH_FILTER" ref="headerPreAuthFilter" /> - <custom-filter ref="ssoAuthenticationFilter" after="BASIC_AUTH_FILTER" /> - - <security:custom-filter ref="krbAuthenticationFilter" after="SERVLET_API_SUPPORT_FILTER" /> - <security:custom-filter ref="CSRFPreventionFilter" after="REMEMBER_ME_FILTER" /> - - <form-login - login-page="/login.jsp" - login-processing-url="/j_spring_security_check" - authentication-success-handler-ref="atlasAuthenticationSuccessHandler" - authentication-failure-handler-ref="atlasAuthenticationFailureHandler" - username-parameter="j_username" - password-parameter="j_password" /> - - <security:logout logout-success-url="/login.jsp" delete-cookies="ATLASSESSIONID" - logout-url="/logout.html" /> - <http-basic /> - <headers disabled="true"/> - <csrf disabled="true"/> - </security:http> - - <beans:bean id="headerPreAuthFilter" class="org.apache.atlas.web.filters.AtlasHeaderPreAuthFilter"> - </beans:bean> - - <beans:bean id="krbAuthenticationFilter" class="org.apache.atlas.web.filters.AtlasAuthenticationFilter"> - </beans:bean> - - <beans:bean id="ssoAuthenticationFilter" class="org.apache.atlas.web.filters.AtlasKnoxSSOAuthenticationFilter"> - </beans:bean> - - <beans:bean id="CSRFPreventionFilter" class="org.apache.atlas.web.filters.AtlasCSRFPreventionFilter"> - </beans:bean> - - <beans:bean id="atlasAuthenticationSuccessHandler" - class="org.apache.atlas.web.security.AtlasAuthenticationSuccessHandler" /> - - <beans:bean id="atlasAuthenticationFailureHandler" - class="org.apache.atlas.web.security.AtlasAuthenticationFailureHandler" /> - - <beans:bean id="formAuthenticationEntryPoint" - class="org.apache.atlas.web.filters.AtlasAuthenticationEntryPoint"> - <beans:constructor-arg value="/login.jsp"/> - </beans:bean> - - <beans:bean id="authenticationEntryPoint" - class="org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint"> - <beans:property name="realmName" value="atlas.com" /> - </beans:bean> - - <beans:bean id="entryPoint" class="org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint"> - <beans:constructor-arg> - <beans:map> - <beans:entry key="hasHeader('User-Agent','Mozilla')" value-ref="formAuthenticationEntryPoint" /> - </beans:map> - </beans:constructor-arg> - <beans:property name="defaultEntryPoint" ref="authenticationEntryPoint"/> - </beans:bean> - - - <beans:bean id="atlasAuthenticationProvider" - class="org.apache.atlas.web.security.AtlasAuthenticationProvider"> - </beans:bean> - - <security:authentication-manager - alias="authenticationManager"> - <security:authentication-provider - ref="atlasAuthenticationProvider" /> - </security:authentication-manager> - - - <security:global-method-security - pre-post-annotations="enabled" /> -</beans:beans>
