Question

I have web application and two domains for it – example.com and example.ru

example.com – for international

example.ru – for local country

My web app using spring security for authorization users but if user login through example.com on example.ru he isn’t logged.

How can do that if user login through example.com or example.ru he will be logged on both domains?

PS: BTW my web application use authorization through OpenID and OAuth

Answer 1

As mentioned you need a single sign on solution, Cloudseal provides a spring security extension which includes a spring namespace so you just need to do something like:

<security:http entry-point-ref="cloudseal">
    <security:intercept-url pattern="/protected/user.do" access="IS_AUTHENTICATED_FULLY" />
    <security:intercept-url pattern="/protected/admin.do" access="ROLE_ADMIN" />
</security:http>

<cloudseal:sso endpoint="http://cloudseal.com" entry-point-id="cloudseal" app-id="quickstart">
    <cloudseal:keystore location="WEB-INF/keystore.jks" password="nalle123">
        <cloudseal:key name="apollo" password="nalle123" />
    </cloudseal:keystore>
    <cloudseal:metadata location="WEB-INF/idp.xml" />
</cloudseal:sso>

See http://www.cloudseal.com/platform/spring-security-single-sign-on