Bien ou mal de créer un flow d'authentification?
Salut
j'ai une application avec spring web flow et spring security, donc je me pose la question si c'est mal de créer un flow pour l'authentification.
voici le flow en question
Code:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
| <?xml version="1.0" encoding="UTF-8"?>
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">
<input name="username"/>
<input name="password"/>
<input name="rememberMe"/>
<on-start>
<evaluate expression="requestParameters.contains('from')?requestParameters.get('from'):'home'"
result="flowScope.from"/>
</on-start>
<view-state id="evaluateAuthentication">
<transition on="validateAuthentication" to="succeededAuthentication">
<evaluate expression="userFaces.authenticate()"/>
</transition>
</view-state>
<end-state id="succeededAuthentication"
view="externalRedirect:#{from}">
<on-entry>
<evaluate expression="authenticationFaces.clearAuthenticateFormData()"/>
</on-entry>
</end-state>
</flow> |