MVC interceptor vs Spring security filter vs something else…?
I'm using Spring-MVC with Spring Security for my web application. It includes user registration pages and private user panel. I have it set up currently with the following URL patterns: whatever/myapp/login user log in whatever/myapp/register?step=1 start registration whatever/myapp/account/** private area views (pages) whatever/myapp/pending view shown while post-registration processes complete whatever/myapp/blocked account blocked view whatever/myapp/register/retry if registration failed, allow retry Essentially, these URLs below should require user authentication, i.e. require log-in: