diff --git a/README.md b/README.md index 0839b8a..c4cb037 100644 --- a/README.md +++ b/README.md @@ -2,3 +2,17 @@ coffee_req ========== appengine app to order coffee - ShipIt ! + + +IF you want to secure static resources, such as HTML files, the way to do this using Spring MVC is to put them in directory A, and to +map this location to path B. Then, using Spring Security, path B can be "secured". +If resources are in path A and SS secures the same path, then when a user tries to reach a resource from the browser, it "confises" spring +so the resource is not secured and the resource can be seen. + + + + + + + +If you want to secure JSP - this is wasy since it is not "static" resource. \ No newline at end of file diff --git a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml index 969e60f..ac72bda 100644 --- a/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml +++ b/coffee-req/src/main/webapp/WEB-INF/spring-servlet.xml @@ -27,7 +27,10 @@ --> + @@ -38,6 +41,7 @@ +