Forum:

Spring

RequestDispatcher null - cant find /j_spring_security_check

Ranch Hand

Posts: 265

posted 13 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi All,
I have the following LoginBean that always returns null on a
RequestDispatcher dispatcher = ((ServletRequest) context.getRequest()).getRequestDispatcher("/j_spring_security_check");

@Component
@Scope("request")
public class LoginBean {

private String username = "";
	private String password = "";
	private boolean rememberMe = false;
	private boolean loggedIn = false;

public String doLogin() throws IOException, ServletException {
		ExternalContext context = FacesContext.getCurrentInstance()
				.getExternalContext();

RequestDispatcher dispatcher = ((ServletRequest) context.getRequest())
				.getRequestDispatcher("/j_spring_security_check");

dispatcher.forward((ServletRequest) context.getRequest(),
				(ServletResponse) context.getResponse());

FacesContext.getCurrentInstance().responseComplete();

// It's OK to return null here because Faces is just going to exit.
		return null;

}

@PostConstruct
	@SuppressWarnings("unused")
	private void handleErrorMessage() {
		Exception e = (Exception) FacesContext
				.getCurrentInstance()
				.getExternalContext()
				.getSessionMap()
				.get(
						AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY);

if (e instanceof BadCredentialsException) {
			FacesContext
					.getCurrentInstance()
					.getExternalContext()
					.getSessionMap()
					.put(
							AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY,
							null);
			FacesContext.getCurrentInstance().addMessage(
					null,
					new FacesMessage(FacesMessage.SEVERITY_ERROR,
							"Username or password not valid.", null));
		}
	}

public String getUsername() {
		return this.username;
	}

public void setUsername(final String username) {
		this.username = username;
	}

public String getPassword() {
		return this.password;
	}

public void setPassword(final String password) {
		this.password = password;
	}

public boolean isRememberMe() {
		return this.rememberMe;
	}

public void setRememberMe(final boolean rememberMe) {
		this.rememberMe = rememberMe;
	}

public boolean isLoggedIn() {
		return this.loggedIn;
	}

public void setLoggedIn(final boolean loggedIn) {
		this.loggedIn = loggedIn;
	}
}

My login.xhtml file is

<?xml version='1.0' encoding='UTF-8' ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
	xmlns:ui="http://java.sun.com/jsf/facelets"
	xmlns:h="http://java.sun.com/jsf/html"
	xmlns:f="http://java.sun.com/jsf/core">

<h:head>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<title>Spring Security 3 Login Page Demo</title>
</h:head>

<h:body>
	<h:messages />
	<f:view>
		<h:form
			id="loginForm"
			prependId="false">
			<label for="j_username"><h:outputText value="Username:" /> 
			</label>
			<h:inputText
				id="j_username"
				required="true">
			</h:inputText>
 
			 
			 
			<label for="j_password"><h:outputText value="Password:" /> 
			</label>
			<h:inputSecret
				id="j_password"
				required="true">
			</h:inputSecret>
 
			 
			 
			<label for="_spring_security_remember_me"> <h:outputText
				value="Remember me" /> </label>
			<h:selectBooleanCheckbox
				id="_spring_security_remember_me" />
			 
 
			<h:commandButton
				type="submit"
				id="login"
				action="#{loginBean.doLogin}"
				value="Login" />
 
		</h:form>
	</f:view>

</h:body>
</html>

applicationContext-security.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
 xmlns:sec="http://www.springframework.org/schema/security"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context"
 xmlns:jee="http://www.springframework.org/schema/jee" xmlns:p="http://www.springframework.org/schema/p"
 xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
		 http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd
		 http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.0.xsd
		 http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">
 <sec:debug />

<sec:global-method-security
		secured-annotations="enabled">
	</sec:global-method-security>

<sec:http
		auto-config="true"
		access-denied-page="/accessDenied.jsp">

<sec:intercept-url
			pattern="/faces/protected**"
			access="ROLE_SUPERVISOR,ROLE_USER,ROLE_TELLER" />
		<sec:intercept-url
			pattern="/**"
			access="IS_AUTHENTICATED_ANONYMOUSLY" />

<sec:form-login
			login-processing-url="/j_spring_security_check"
			login-page="/faces/login.jsf"
			default-target-url="/"
			authentication-failure-url="/faces/login.jsf" />
		<sec:logout
			logout-url="/logout*"
			logout-success-url="/" />

</sec:http>
	
	
 
 <sec:authentication-manager>
 <sec:authentication-provider>
 <sec:password-encoder hash="md5"/>
 <sec:user-service>
 <sec:user name="rod" password="a564de63c2d0da68cf47586ee05984d7" authorities="ROLE_SUPERVISOR, ROLE_USER, ROLE_TELLER" />
 <sec:user name="dianne" password="65d15fe9156f9c4bbffd98085992a44e" authorities="ROLE_USER,ROLE_TELLER" />
 <sec:user name="scott" password="2b58af6dddbd072ed27ffc86725d7d3a" authorities="ROLE_USER" />
 <sec:user name="peter" password="22b5c9accc6e1ba628cedc63a72d57f8" authorities="ROLE_USER" />
	 </sec:user-service>
	 </sec:authentication-provider>
 </sec:authentication-manager>

</beans>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	id="springsecurity"
	version="2.5">
	<display-name>springsecurity</display-name>

<session-config>
		<session-timeout>10</session-timeout>
	</session-config>

<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>
	
	<listener>
		<listener-class>org.springframework.web.context.request.RequestContextListener</listener-class>
	</listener>
	
	
	
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
			/WEB-INF/applicationContext.xml
			/WEB-INF/applicationContext-security.xml
		</param-value>
	</context-param>
	<context-param>
 	<param-name>javax.faces.PROJECT_STAGE</param-name>
 	<param-value>Development</param-value>
 	</context-param>
	<context-param>
		<param-name>javax.faces.FACELETS_SKIP_COMMENTS</param-name>
		<param-value>true</param-value>
	</context-param>
	<context-param>
		<param-name>com.sun.faces.expressionFactory</param-name>
		<param-value>com.sun.el.ExpressionFactoryImpl</param-value>
	</context-param>

<filter>
		<filter-name>springSecurityFilterChain</filter-name>
		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>springSecurityFilterChain</filter-name>
		<url-pattern>/*</url-pattern>
		<dispatcher>FORWARD</dispatcher>
		<dispatcher>REQUEST</dispatcher>
	</filter-mapping>
 <servlet>
		<servlet-name>Faces Servlet</servlet-name>
		<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
		<load-on-startup>1</load-on-startup>
	</servlet>
	<servlet-mapping>
		<servlet-name>Faces Servlet</servlet-name>
		<url-pattern>/faces/*</url-pattern>
		<url-pattern>*.faces</url-pattern>
	</servlet-mapping>

<welcome-file-list>
		<welcome-file>/index.html</welcome-file>
	</welcome-file-list>
</web-app>

Can anybody help.

Mat

Vyas Sanzgiri

Ranch Hand

Posts: 686

I like...

posted 13 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Why dont you post login form to /j_spring_security_check directly instead of using LoginBean. What is the use of LoginBean?

===Vyas Sanzgiri===
My Blog

Consider Paul's rocket mass heater.