Implement spring security on google app engine

Question

I\'m trying to integrate the spring security on google app engine. But it doesn\'t work properly. I wang to authenticate user when they try to access index page

Answer 1

WebApplicationInitializer requires Servlet 3.0, but Appengine supports only Servlet 2.5. So you have to use plain XML based config, at least for initialization. And configure Spring filter/servlet in web.xml manually.

You need to put into web.xml:

    contextConfigLocation
    /WEB-INF/spring-security.xml


    org.springframework.web.context.ContextLoaderListener



    springSecurityFilterChain
    org.springframework.web.filter.DelegatingFilterProxy


    springSecurityFilterChain
    /*



    spring-dispatcher
    org.springframework.web.servlet.DispatcherServlet
    1
    
        contextClass
        org.springframework.web.context.support.AnnotationConfigWebApplicationContext
    
    
        contextConfigLocation
        path.to.AppConfig
    


    spring-dispatcher
    /*

and into spring-security.xml:

Basically it's all standard stuff from pre-servlet 3.0 time, and you could use any tutorial (or old docs) based on servlet 2.4 or 2.5, it will work on Appengine.

PS also you could vote for Servlet 3.0 support at https://code.google.com/p/googleappengine/issues/detail?id=3091