Comments on: Rerouting Spring Security 2 Login Page Through a Spring Controller

By: pmularien

pmularien — Fri, 16 Apr 2010 13:13:17 +0000

@Thomas
That is part of the job of Spring Security. The form ACTION of j_spring_security_check is intercepted by Spring Security, which takes care of all the login stuff.

By: Thomas

Thomas — Fri, 16 Apr 2010 02:31:46 +0000

Okay, where is the Java code that checks the password and logs the user in? Shouldn’t there be code in the controller that reads the username/password and stuffs it into spring-security?

By: Kristofer

Kristofer — Wed, 10 Mar 2010 02:25:41 +0000

Nice article, I only wish you’d provide the project structure. I have no idea what those intercept-url patterns refer to…

By: LaSalle

LaSalle — Sun, 14 Feb 2010 18:56:55 +0000

form–action=’/webapp/j_spring_security_check’ instead of /j_spring_security_check’

By: LaSalle

LaSalle — Sun, 14 Feb 2010 18:54:33 +0000

Following these instructions I got this to work in 3.0.
Only difference was that I had to use
in my form rather than just

cheers!!

By: LaSalle

LaSalle — Sun, 14 Feb 2010 00:43:04 +0000

I tried this in version 3.0, it did not work and then switched to 2.5 — still getting the same issue.

I get the login page to work , but when I click submit, it seems to be doing nothing?
So my question is — how does the j_spring_security_check link used in the form work? in this scenario

thanks,
Lasalle

By: saved programmer

saved programmer — Fri, 05 Jun 2009 13:22:55 +0000

Absolutely excelent post, you surely saved me some days. Thanks, good luck.

By: MattB

MattB — Tue, 03 Feb 2009 19:14:57 +0000

Couldn't you also specify access="ROLE_ANONYMOUS" for login.do? As I understand Spring Security, anonymous users are automatically put in this role.