iSharkFly-Docs
/
java-tutorials
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Refined the url pattern for perform_login, remove permitAll (it's not needed, works either way)

This commit is contained in:
Robert Kohanyi 2016-04-24 20:48:07 +01:00
parent c042617936
commit cddd15019c
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
spring-security-mvc-login/src/main/java/org/baeldung/spring/SecSecurityConfig.java
View File

@ -39,7 +39,7 @@ public class SecSecurityConfig extends WebSecurityConfigurerAdapter {
.anyRequest().authenticated() .anyRequest().authenticated()
.and() .and()
//.requiresChannel() //.requiresChannel()
//.antMatchers("/login*", "/perform_log*").requiresSecure() //.antMatchers("/login*", "/perform_login").requiresSecure()
//.anyRequest().requiresInsecure() //.anyRequest().requiresInsecure()
//.and() //.and()
//.sessionManagement() //.sessionManagement()

4
spring-security-mvc-login/src/main/resources/webSecurityConfig.xml
View File

@ -14,12 +14,12 @@
<!-- <!--
<intercept-url pattern="/anonymous*" access="isAnonymous()" requires-channel="http"/> <intercept-url pattern="/anonymous*" access="isAnonymous()" requires-channel="http"/>
<intercept-url pattern="/login*" access="permitAll" requires-channel="https"/> <intercept-url pattern="/login*" access="permitAll" requires-channel="https"/>
<intercept-url pattern="/perform_log*" access="permitAll" requires-channel="https"/> <intercept-url pattern="/perform_login" requires-channel="https"/>
<intercept-url pattern="/**" access="isAuthenticated()" requires-channel="http"/> <intercept-url pattern="/**" access="isAuthenticated()" requires-channel="http"/>
--> -->
<csrf disabled="true"/> <csrf disabled="true"/>
<form-login login-page='/login.html' login-processing-url="/perform_login" default-target-url="/homepage.html" authentication-failure-url="/login.html?error=true" <form-login login-page='/login.html' login-processing-url="/perform_login" default-target-url="/homepage.html" authentication-failure-url="/login.html?error=true"
always-use-default-target="true"/> always-use-default-target="true"/>