geoserver

1
<security>
2
  <roleServiceName>default</roleServiceName>
3
  <authProviderNames>
4
    <string>default</string>
5
  </authProviderNames>
6
  <configPasswordEncrypterName>pbePasswordEncoder</configPasswordEncrypterName>
7
  <encryptingUrlParams>false</encryptingUrlParams>
8
  <filterChain>
9
    <filters name="web" class="org.geoserver.security.HtmlLoginFilterChain" interceptorName="interceptor" exceptionTranslationName="exception" path="/web/**,/gwc/rest/web/**,/" disabled="false" allowSessionCreation="true" ssl="false" matchHTTPMethod="false">
10
      <filter>rememberme</filter>
11
      <filter>form</filter>
12
      <filter>anonymous</filter>
13
    </filters>
14
    <filters name="webLogin" class="org.geoserver.security.ConstantFilterChain" path="/j_spring_security_check,/j_spring_security_check/,/login" disabled="false" allowSessionCreation="true" ssl="false" matchHTTPMethod="false">
15
      <filter>form</filter>
16
    </filters>
17
    <filters name="webLogout" class="org.geoserver.security.LogoutFilterChain" path="/j_spring_security_logout,/j_spring_security_logout/,/logout" disabled="false" allowSessionCreation="false" ssl="false" matchHTTPMethod="false">
18
      <filter>formLogout</filter>
19
    </filters>
20
    <filters name="rest" class="org.geoserver.security.ServiceLoginFilterChain" interceptorName="restInterceptor" exceptionTranslationName="exception" path="/rest/**" disabled="false" allowSessionCreation="false" ssl="false" matchHTTPMethod="false">
21
      <filter>basic</filter>
22
      <filter>anonymous</filter>
23
    </filters>
24
    <filters name="gwc" class="org.geoserver.security.ServiceLoginFilterChain" interceptorName="restInterceptor" exceptionTranslationName="exception" path="/gwc/rest/**" disabled="false" allowSessionCreation="false" ssl="false" matchHTTPMethod="false">
25
      <filter>basic</filter>
26
    </filters>
27
    <filters name="default" class="org.geoserver.security.ServiceLoginFilterChain" interceptorName="interceptor" exceptionTranslationName="exception" path="/**" disabled="false" allowSessionCreation="false" ssl="false" matchHTTPMethod="false">
28
      <filter>basic</filter>
29
      <filter>anonymous</filter>
30
    </filters>
31
  </filterChain>
32
  <rememberMeService>
33
    <className>org.geoserver.security.rememberme.GeoServerTokenBasedRememberMeServices</className>
34
    <key>geoserver</key>
35
  </rememberMeService>
36
  <bruteForcePrevention>
37
    <enabled>true</enabled>
38
    <minDelaySeconds>1</minDelaySeconds>
39
    <maxDelaySeconds>5</maxDelaySeconds>
40
    <maxBlockedThreads>100</maxBlockedThreads>
41
    <whitelistedMasks>
42
      <string>127.0.0.1</string>
43
    </whitelistedMasks>
44
  </bruteForcePrevention>
45
</security>