Spring Security沒有通過JSF表單成功登錄後重定向到登錄頁面

我有一個登錄表單，一個jsf後臺登錄bean和一個用戶詳細信息服務。儘管用戶已通過身份驗證，但他並未重定向到登錄頁面。該bean通過UserDetailsService（不存在任何問題）對用戶進行身份驗證。Spring Security沒有通過JSF表單成功登錄後重定向到登錄頁面

package com.emredincer.yetki.bean; 


import javax.faces.bean.ManagedBean; 
import javax.faces.bean.ManagedProperty; 
import javax.faces.bean.RequestScoped; 
import javax.security.sasl.AuthenticationException; 

import org.springframework.security.authentication.AuthenticationManager; 
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; 
import org.springframework.security.core.Authentication; 
import org.springframework.security.core.context.SecurityContextHolder; 

import com.emredincer.yetki.entity.Kullanici; 
import com.emredincer.yetki.service.IKullaniciService; 

@ManagedBean(name = "loginBean") 
@RequestScoped 
public class LoginBean { 



    private String username = null; 
    private String password = null; 

    @ManagedProperty(value="#{authenticationManager}") 
    private AuthenticationManager authenticationManager = null; 

    @ManagedProperty("#{KullaniciServiceImpl}") 
    private IKullaniciService kullaniciServis; 

    private Kullanici kullanici = new Kullanici(); 



    public String login(){ 

     try{ 
      Authentication request = new UsernamePasswordAuthenticationToken(this.getUsername(), this.getPassword()); 
      Authentication result = authenticationManager.authenticate(request); 
      SecurityContextHolder.getContext().setAuthentication(result); 
     } 
     catch(Exception e){ 

      e.printStackTrace(); 
      return "incorrect"; 
     } 
    return "correct"; 

    } 

    public String logout(){ 

     SecurityContextHolder.clearContext(); 
     return "loggedout"; 
    } 

    public AuthenticationManager getAuthenticationManager() { 
     return authenticationManager; 
    } 

    public void setAuthenticationManager(AuthenticationManager authenticationManager) { 
     this.authenticationManager = authenticationManager; 
    } 

    public String getUsername() { 
     return username; 
    } 

    public void setUsername(String username) { 
     this.username = username; 
    } 

    public String getPassword() { 
     return password; 
    } 

    public void setPassword(String password) { 
     this.password = password; 
    } 
    public IKullaniciService getKullaniciServis() { 
     return kullaniciServis; 
    } 

    public void setKullaniciServis(IKullaniciService kullaniciServis) { 
     this.kullaniciServis = kullaniciServis; 
    } 

    public Kullanici getKullanici() { 
     return kullanici; 
    } 

    public void setKullanici(Kullanici kullanici) { 
     this.kullanici = kullanici; 
    } 

}

<http auto-config="true"> 

     <intercept-url pattern="/web/*" access="IS_AUTHENTICATED_ANONYMOUSLY" /> 
     <intercept-url pattern="/**" access="ROLE_USER" /> 

     <form-login login-page="/web/login.xhtml" 

     authentication-success-handler-ref="successHandler" 
     /> 

    </http> 

    <authentication-manager alias="authenticationManager"> 

      <authentication-provider user-service-ref="kullaniciDetayServisi" /> 

    </authentication-manager> 


    </beans:beans>

public class CustomAuthSuccessHandler implements AuthenticationSuccessHandler { 




    public void onAuthenticationSuccess(HttpServletRequest arg0, 
      HttpServletResponse arg1, Authentication arg2) throws IOException, 
      ServletException { 
     arg1.sendRedirect(arg0.getContextPath() + "/main.xhtml"); 

    } 
} 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml" 
    xmlns:h="http://java.sun.com/jsf/html" 
    xmlns:f="http://java.sun.com/jsf/core" 
    xmlns:ui="http://java.sun.com/jsf/facelets"> 
<h:head> 
</h:head> 
<h:body> 
    <div align="center" style=""> 
     <h:form id="loginFormId" prependId="false"> 
       <div id="loginFieldsPnlId"> 
        <div id="loginFieldUsrContId"> 
         <h:outputText id="outTxtUserNameId" value="Username: " name="outTxtUserNameNm"></h:outputText> 
         <h:inputText id="userName" required="true" value="#{loginBean.username}" requiredMessage="Please enter username"></h:inputText> 
         <h:outputLabel id="outLblUserNameId" for="userName" name="outLblUserNameNm"></h:outputLabel> 
        </div> 
        <div id="loginFieldPassContId"> 
         <h:outputText id="outTxtPasswordId" value="Password: " name="outTxtPasswordNm"></h:outputText> 
         <h:inputSecret id="password" required="true" value="#{loginBean.password}" requiredMessage="Please enter password" name="inTxtPasswordNm"></h:inputSecret> 
         <h:outputLabel id="outLblPasswordId" for="password" name="outLblPasswordNm"></h:outputLabel> 
        </div> 
       </div> 
       <div id="loginBtnPanelId"> 
        <h:commandButton id="btnLoginId" value="Login" action="#{loginBean.login}" styleClass="loginPanelBtn" ajax="false"></h:commandButton> 
        <h:commandButton id="btnCancelId" value="Cancel" action="#{loginBean.cancel}" styleClass="loginPanelBtn" immediate="true" update="loginFormId"></h:commandButton> 
       </div> 
     </h:form> 
    </div> 
    <div> 
     <h:messages></h:messages> 
    </div> 
</h:body> 
</html>

來源

2016-01-25 desperado06

我通過修改登錄方法的return語句

公共字符串登錄（）{

try{ 
     Authentication request = new UsernamePasswordAuthenticationToken(this.getUsername(), this.getPassword()); 
     Authentication result = authenticationManager.authenticate(request); 
     SecurityContextHolder.getContext().setAuthentication(result); 
    } 
    catch(Exception e){ 

     e.printStackTrace(); 
     return "incorrect"; 
    } 
return "/main.xhtml"; 

}

解決問題

來源

2016-01-26 09:08:18 desperado06

這將執行一個前進，而不是重定向，這在技術上是完全不同的。兩種導航方式的基本技術要求絕對不可交換（冪等與非冪等）。希望您瞭解其對客戶行爲和用戶體驗的影響。至於你的具體問題，原因在目前提供的信息中是不可見的，但你需要確保你沒有使用ajax進行登錄（例如，刪除f：ajax，或者如果你使用的是primefaces按鈕，則設置ajax =「false 「）。 – BalusC

感謝您的回覆，從用戶的角度來看，轉發和重定向之間的區別是什麼？你可以請提供一個簡短的解釋 – desperado06

http://stackoverflow.com/q/15521451 – BalusC

Spring Security沒有通過JSF表單成功登錄後重定向到登錄頁面

回答

相關問題