保持相同的網址登錄春季安全後

Question

我想留在登錄，但春天權利人後，在同一個頁面u到重定向到defaultSuccessUrl 我的代碼是這樣的

@Override 
    protected void configure(HttpSecurity http) throws Exception { 
     http 
      .csrf().disable() 
      .authorizeRequests() 
      .antMatchers("/css/**","/fonts/**","/js/**","/app/**","/images/**","/partials/**").permitAll() 
       .anyRequest() 
        .authenticated() 
     .and() 
      .formLogin() 
       .loginPage("/login") 
        .defaultSuccessUrl("/index.html") 
        .failureUrl("/login?error=true") 
        .permitAll() 
        .and().logout().logoutSuccessUrl("/login?logout") 
        .and().exceptionHandling().accessDeniedPage("/pages/303.html"); 

    } 

Answer 1

設置

總是使用-default目標=「真」

這將迫使彈簧安全去/index.html

Answer 2

我想你應該添加一個認證成功處理

@Override 
protected void configure(HttpSecurity http) throws Exception { 
    SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler(); 
    successHandler.setUseReferer(true);//redirect to the previous page 
    http 
     .csrf().disable() 
     .authorizeRequests() 
     .antMatchers("/css/**","/fonts/**","/js/**","/app/**","/images/**","/partials/**").permitAll() 
      .anyRequest() 
       .authenticated() 
    .and() 
     .formLogin() 
      .loginPage("/login") 
       .defaultSuccessUrl("/index.html") 
       .failureUrl("/login?error=true") 
       .permitAll() 
       .successHandler(successHandler)//enable success handler 
       .and().logout().logoutSuccessUrl("/login?logout") 
       .and().exceptionHandling().accessDeniedPage("/pages/303.html"); 

}