2
我想知道我们是否可以在authenticationconfig.xml
文件中定义多个安全测试?工作灯:多个安全领域
它会正常工作,或导致问题?
排序是这样的:
<securityTests>
<mobileSecurityTest name="myMobileSecurity">
<testUser realm="myAppRealm"/>
<testDeviceId provisioningType="none"/>
</mobileSecurityTest>
<customSecurityTest name="PushApplication-custom-securityTest">
<test realm="PushAppRealm" isInternalUserID="true" />
</customSecurityTest>
<customSecurityTest name="myAppSecurityTestCustom">
<test realm="myAppRealm" isInternalUserID="true" />
</customSecurityTest>
</securityTests>
<realms>
<realm loginModule="abcModule" name="myAppRealm">
<className>com.worklight.core.auth.ext.FormBasedAuthenticator</className>
<parameter name="login-page" value="login.html" />
</realm>
<realm loginModule="PushAppLoginModule" name="PushAppRealm">
<className>com.worklight.core.auth.ext.BasicAuthenticator</className>
<parameter name="basic-realm-name" value="PushAppRealm"/>
</realm>
<realm loginModule="requireLogin" name="WorklightConsole">
<className>com.worklight.core.auth.ext.FormBasedAuthenticator</className>
<onLoginUrl>/console</onLoginUrl>
</realm>
</realms>
<loginModules>
<loginModule name="PushAppLoginModule">
<className>com.abc.MyCustomLoginModule</className>
</loginModule>
<loginModule name="abcModule">
<className>com.worklight.core.auth.ext.NonValidatingLoginModule</className>
</loginModule>
<loginModule name="requireLogin">
<className>com.worklight.core.auth.ext.SingleIdentityLoginModule</className>
</loginModule>
</loginModules>
谢谢Idan。一个移动测试是针对设备证券的,另外两个是定制测试;推安全和通用适配器保护。使用这些我试图保护所有资源免受基于设备或基于浏览器的攻击。 – AAhad 2013-05-07 11:47:34