Verify spring security path

[r-brown]

In the spring security configuration https://github.com/Labs64/NetLicensing-Gateway/blob/master/src/main/resources/context/security.xml#L15 the path mycommerce/keygen points to a non-exisiting endpoint.

• Is there any reason to define such path?
• how the real path is protected then: https://github.com/Labs64/NetLicensing-Gateway/blob/master/src/main/java/com/labs64/netlicensing/gateway/util/Constants.java#L29

[r-brown]

Implementation is not acceptable. Which impact will be at the current integrations after this change? Test?!?!?!

[yushkevich]

Authentication must be provided for the mycommerce/codegen

1. send mycommerce request without authentication
2. send mycommerce request with the wrong authentication
3. send mycommerce request with the right authentication

[r-brown]

3. send mycommerce request with the right authentication

fails with HTTP401 - why?

Why do we need integration specific entry in the global spring-security configuration?

[yushkevich]

3. send mycommerce request with the right authentication (it was wrong screenshot)

[yushkevich]

Why do we need integration specific entry in the global spring-security configuration?

• there is no reason
  1. send mycommerce request without authentication
  2. send mycommerce request with the wrong authentication
  3. send mycommerce request with the right authentication