Spring Security 3 - how to route all requests through authentication mechanism

[Mag Wells]

The following configuration works fine for me -

...
<intercept-url pattern="/myApp/**"   access="ROLE_USER"/>
...

This works fine. It gets me a login page etc.. and the flow works perfect. However, when I try to access any other protected resource like for example

/myApp/yy/test.do

It says the resource is unavailable. How do I configure the the intercept-url so that /myApp/yy/test.do request goes thru the authentication mechanism i.e. if the user isn't logged in it gets back the login page etc.

[Mark Secrist]

You should be able to add a line like:

  
<intercept-url pattern="/myApp/yy/**"   access="ROLE_USER"/>  

You can have multiple intercept-url lines. That gives you the flexibility to associated different access rules for different paths.