Question

What is the recommended way to add Spring Security to a web application that is using Spring’s new WebApplicationInitializer interface instead of the web.xml file? I’m looking for the equivalent of:

<filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>

UPDATE
The provided answers are reasonable but they both assume that I’ve got a servletContext instance. I’ve looked through the hierarchy of WebApplicationInitializers and I don’t see any access to the servlet context unless I choose to override one of Spring’s initializer methods. AbstractDispatcherServletInitializer.registerServletFilter seems like the sensible choice but it doesn’t default to URL pattern mapping and I’d hate to change filter registration for everything if there is a better way.

Answer 1

This is the way that I have done it:

container.addFilter("springSecurityFilterChain", new DelegatingFilterProxy("springSecurityFilterChain"))
                    .addMappingForUrlPatterns(null, false, "/*");

container is an instance of ServletContext