春季安全记得我认证

Question

I have the mechanism to save cookies at the client-side. But when I was trying to implement remember-me using spring security I came upon this tutorial :

http://static.springsource.org/spring-security/site/docs/3.0.x/reference/remember-me.html#remember-me-persistent-token

but here everything is abstract and no examples are given.. Can someone tell me how can I use the interfaces mentioned in this tutorial in my application where I need to implement persistent cookies... And kindly tell me what do I need to define in my security.xml file?

I am authenticating my user against RESTful services..

Answer 1

The official documentation is not abstract. Turning on remember-me with Spring Security is very simple (I suppose that Spring Security already configured and users are stored in DB):

1 Turn on remeber-me in the conf :

<http>
    ...
    <remember-me data-source-ref="yourDataSource"/>
</http>

2 Create corresponding table in the database:

create table persistent_logins (username varchar(64) not null, series varchar(64) primary key, token varchar(64) not null, last_used timestamp not null)

3 Add corresponding checkbox to your login form:

<input id="rememeberMe" type="checkbox" name="_spring_security_remember_me">

In a case of REST you need to adjust third step according to your authentication scenrio.