Spring Security  2.0 다운로드 파일에 들어있는 예제를 이해하는데 도움을 주기 위해 두 가지 작업만 했다.

• jsp를 한글로 변경해서 톰캣에 올려서 보면서 이해하기 쉽게 함
• 이클립스 프로젝트로 변경

이클립스 인코딩은 UTF-8로 설정해야 한다. JDK 6.0, Tomcat 6에서 테스트한 것이다. 다운로드 파일에 예제가 하나 뿐인 것이 아쉽지만, 레퍼런스가 있어서 사용하는데 무리가 없을 것 같다. 설정이 완전히 바뀌었지만, 내부 메커니즘 이해를 위해서는 5회 KSUG 세미나에 진행한 내용이 여전히 유용한 것 같다.



Todo 목록: 아래 사항을 쉽게 쓸 수 있는 래퍼 혹은 적용을 도울 예제 만들기

• Simplified namespace-based configuration syntax. Old configurations could require hundreds of lines of XML but our new convention over configuration approach ensures that many deployments will now require less than 10 lines.
• OpenID integration, which is the web's emerging single sign on standard (supported by Google, IBM, Sun, Yahoo and others)
• Windows NTLM support, providing easy enterprise-wide single sign on against Windows corporate networks
• Support for JSR 250 ("EJB 3") security annotations, delivering a standards-based model for authorization metadata
• AspectJ pointcut expression language support, allowing developers to apply cross-cutting security logic across their Spring managed objects
• Substantial improvements to the high-performance domain object instance security ("ACL") capabilities
• Comprehensive support for RESTful web request authorization, which works well with Spring 2.5's @MVC model for building RESTful systems
• Long-requested support for groups, hierarchical roles and a user management API, which all combine to reduce development time and significantly improve system administration
• An improved, database-backed "remember me" implementation
• Support for portlet authentication out-of-the-box
• Support for additional languages
• Numerous other general improvements, documentation and new samples
• New support for web state and flow transition authorization through the Spring Web Flow 2.0 release
• New support for visualizing secured methods, plus configuration auto-completion support in Spring IDE
• Enhanced WSS (formerly WS-Security) support through the Spring Web Services 1.5 release

출처: http://www.infoq.com/news/2008/04/spring-security

참고사항: Pathway from ACEGI to Spring Security 2.0