Merci d'avoir pris le temps de répondre, j'ai opté pour cette solution,
ce qui me pose un nouveau probleme
1 2 3 4 5 6 7 8 9 10
| <form action="<c:url value='j_spring_security_check'/>" method="POST">
<label for="j_username">Username</label>
<input type="text" name="j_username" id="j_username"/>
<br/>
<label for="j_password">Password</label>
<input type="password" name="j_password" id="j_password"/>
<br/>
<input type="submit" value="Login"/>
</form> |
si je veux utiliser les
<intercept-url pattern="/adminAcceuil.do" access="ROLE_ADMIN" />
je dois implanter ce security namespace
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
| <beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-2.0.1.xsd">
<!-- -->
<!-- <logout logout-success-url="/index.do"/> -->
<http auto-config='true' access-denied-page="/index.do" entry-point-ref="formLoginAuthenticationEntryPoint">
<intercept-url pattern="/adminAcceuil.do" access="ROLE_ADMIN" />
<intercept-url pattern="/userAcceuil.do" access="ROLE_USER" />
<intercept-url pattern="/*.do" access="IS_AUTHENTICATED_ANONYMOUSLY" />
<form-login login-page="/login.do" default-target-url="/confirmationLogin.do"/>
</http>
<authentication-provider user-service-ref="userDetailsService"/>
<authentication-manager alias="authenticationManager"/>
</beans:beans> |
Mais cela semble entrer en conflit avec le namespace standard:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
| <bean id="formAuthenticationProcessingFilter"
class="org.springframework.security.ui.webapp.AuthenticationProcessingFilter">
<property name="filterProcessesUrl">
<value>/j_spring_security_check</value>
</property>
<property name="authenticationFailureUrl">
<value>/authenticationFailed.do</value>
</property>
<property name="defaultTargetUrl">
<value>/confirmationLogin.do</value>
</property>
<property name="authenticationManager">
<ref bean="authenticationManager" />
</property>
</bean> |
Ma question:
Est-ce qu'il est normal que je dois définir ceci:
1 2 3 4 5 6 7 8 9
| <bean id="formLoginAuthenticationEntryPoint"
class="org.springframework.security.ui.webapp.AuthenticationProcessingFilterEntryPoint">
<property name="loginFormUrl">
<value>/login.do</value>
</property>
<property name="forceHttps">
<value>true</value>
</property>
</bean> |
alors que la page 'login.do' est déja spécifié dans mon sécurity namespace plus haut. Des idées ?
Partager