security-context.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-4.1.xsd
		http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">

	<!-- <security:csrf disabled="true" /> -->

	<security:authentication-manager>
		<security:authentication-provider>
			<security:jdbc-user-service
				data-source-ref="dataSource"
				authorities-by-username-query='select username, authority from users where binary username = ?'
				users-by-username-query='select username, password, enabled from users where binary username = ?'
				id="jdbcUserService" />
			<security:password-encoder ref="passwordEncoder"></security:password-encoder>
		</security:authentication-provider>
	</security:authentication-manager>


	<security:http use-expressions="true">
		<security:intercept-url pattern="/admin"
			access="hasAuthority('ROLE_ADMIN')" />
			
		<security:intercept-url pattern="/create"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/offerDeleted"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/iscreated"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/sendMessage"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/offerCreated"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/messages"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/getMessages"
			access="isAuthenticated()" />
			
		<security:intercept-url pattern="/" access="permitAll" />
		
		<security:intercept-url pattern="/message" access="permitAll" />
		
		<security:intercept-url pattern="/denied"
			access="permitAll" />
			
		<security:intercept-url pattern="/newAccount"
			access="permitAll" />
			
		<security:intercept-url pattern="/register"
			access="permitAll" />
			
		<security:intercept-url pattern="/loggedOut"
			access="permitAll" />
			
		<security:intercept-url pattern="/loginForm"
			access="permitAll" />
			
		<security:intercept-url pattern="/createAccount"
			access="permitAll" />
			
		<security:intercept-url pattern="/accountCreated"
			access="permitAll" />
			
		<security:intercept-url pattern="/show" access="permitAll" />
		
		<security:intercept-url pattern="/static/**"
			access="permitAll" />
			
		<security:intercept-url pattern="/login"
			access="permitAll" />
			
		<security:intercept-url pattern="/logout"
			access="permitAll" />
		
		<security:intercept-url pattern="/**" access="denyAll" />

		<security:form-login login-page="/loginForm"
			authentication-failure-url="/login?error=true" default-target-url="/"
			always-use-default-target="true" />

		<security:access-denied-handler
			error-page="/denied" />
			
		<security:remember-me key="offersAppKey"
			user-service-ref="jdbcUserService" />
	</security:http>

	<security:global-method-security
		secured-annotations="enabled"></security:global-method-security>



	<bean id="passwordEncoder"
		class="org.springframework.security.crypto.password.StandardPasswordEncoder">
	</bean>
</beans>