<security:http entry-point-ref="samlEntryPoint" use-expressions="false">
<security:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY"/>
<security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
<security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>
竟然出現 Failed to evaluate expression ‘IS_AUTHENTICATED_FULLY’錯誤!
後來經過 拜Google大神後,才知道https://github.com/spring-projects/spring-security-oauth/issues/625,原來,Spring Security已經悄悄地將 IS_AUTHENTICATED_FULLY拿掉了,
如果還想使用,必須加上 use-expressions="false" 才可以!
不然就乖乖地使用 fullyAuthenticated代替原有的 IS_AUTHENTICATED_FULLY吧!
<security:http entry-point-ref="samlEntryPoint" >
<security:intercept-url pattern="/**" access="fullyAuthenticated"/>
<security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
<security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>