Spring Security - JSF login authentication issue

[anandhkumar thiyagarajan]

Hi Everyone,

I was trying to integrate spring security with JSF for login authentication. I am running into some problem which i am not able to figure out. Below mentioned are the required files

Dispatcher-Servlet.xml

[B][I]<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">


	<bean id="springApplicationContext" class="com.mq.updatemanager.service.SpringApplicationContext" />
	<bean id="ttDataSource" class="org.apache.commons.dbcp.BasicDataSource"
	          destroy-method="">

		<property name="maxActive" value="100" />
		<property name="maxIdle" value="30" />
		<property name="maxWait" value="10000" />
		<property name="logAbandoned" value="true" />
		<property name="removeAbandoned" value="true" />
		<property name="removeAbandonedTimeout" value="60" />

		<property name="driverClassName" value="com.mysql.jdbc.Driver" />
		<property name="url" value="jdbc:mysql://localhost:3306/updatemanager" />
		<property name="username" value="root" />
		<property name="password" value="notallowed" />
	</bean>

	<bean id="ttSessionFactory"
		class="org.springframework.orm.hibernate3.LocalSessionFactoryBean">
		<property name="dataSource" ref="ttDataSource" />
		<property name="hibernateProperties">
			<props>
				<prop key="hibernate.dialect">
					org.hibernate.dialect.MySQLDialect
				</prop>
				<prop key="hibernate.show_sql">
					false
				</prop>
				<prop key="hibernate.hbm2ddl.auto">
					update
				</prop>
				<prop key="hibernate">
					update
				</prop>
			</props>
		</property>
		<property name="mappingDirectoryLocations">
			<list>
				<value>
					WEB-INF/classes/com/mq/updatemanager/domain/
				</value>
			</list>
		</property>
	</bean>
	
	 <!-- Hibernate Template bean for ttUserDAO. -->
    <bean id="ttUserDAO" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
        <property name="transactionManager">
            <ref bean="transactionManager"/>
        </property>
        <property name="target">
            <ref bean="ttUserDAOWrapper"/>
        </property>
        <property name="transactionAttributes">
            <props>
                <prop key="load*">
                    PROPAGATION_REQUIRED, readOnly
                </prop>
                <prop key="find*">
                    PROPAGATION_REQUIRED, readOnly
                </prop>
                <prop key="get*">
                    PROPAGATION_REQUIRED, readOnly
                </prop>
                <prop key="insert*">
                    PROPAGATION_REQUIRED
                </prop>
                <prop key="update*">
                    PROPAGATION_REQUIRED
                </prop>
            </props>
        </property>
    </bean>
    
    <!-- Hibernate Template bean for ttUserDAOWrapper. -->
    
    <bean id="ttUserDAOWrapper" class="com.mq.updatemanager.dao.UserDAOImpl">
        <property name="sessionFactory">
            <ref bean="ttSessionFactory"/>
        </property>
    </bean>
    
     <!-- Transaction manager for a single Hibernate SessionFactory (alternative
    to JTA) -->
    <bean id="transactionManager"
     class="org.springframework.orm.hibernate3.HibernateTransactionManager">
        <property name="sessionFactory">
            <ref local="ttSessionFactory"/>
        </property>
    </bean>
    
     <!-- Hibernate Template bean that will be assigned to DAOs. -->
    <bean id="hibernateTemplate" class="org.springframework.orm.hibernate3.HibernateTemplate">
        <property name="sessionFactory">
            <ref bean="ttSessionFactory"/>
        </property>
    </bean>

</beans>[/I][/B]

applicationContext-security.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans:beans 
	xmlns="http://www.springframework.org/schema/security"
	xmlns:security="http://www.springframework.org/schema/security"
	xmlns:beans="http://www.springframework.org/schema/beans" 
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans 
	http://www.springframework.org/schema/beans/spring-beans.xsd
    http://www.springframework.org/schema/security 
    http://www.springframework.org/schema/security/spring-security-3.1.xsd">

	<global-method-security pre-post-annotations="enabled">
	</global-method-security>

	<http auto-config="true" use-expressions="true" access-denied-page="/denied.xhtml">
		<intercept-url pattern="/login.xhtml" access="permitAll"/>
		<form-login login-page="/login.xhtml" login-processing-url="/j_spring_security_check"
    		 authentication-failure-url="/login.xhtml?error=true" 
    		 default-target-url="/"/>
    	<logout invalidate-session="true" logout-success-url="/index.xhtml"
    		logout-url="/logout.xhtml"/>
		<remember-me />	
		<session-management invalid-session-url="/login.xhtml">
			<concurrency-control max-sessions="1"
				error-if-maximum-exceeded="true" />
		</session-management>
	</http>

	<!-- hibernate DAO for authentication with sessionFactory dependency from 
		dispatcher-servlet.xml defined in the web.xml -->
	<beans:bean id="userDAO" class="com.mq.updatemanager.dao.UserDAOImpl">
		<beans:property name="sessionFactory" ref="ttSessionFactory"></beans:property>
	</beans:bean>

	<beans:bean id="userService" class="com.mq.updatemanager.dao.UserLoginService">
		<beans:property name="userDAO" ref="userDAO"></beans:property>
	</beans:bean>

	<authentication-manager>
		<authentication-provider user-service-ref="userService" >
			<password-encoder hash="sha">
				<salt-source user-property="salt" />
			</password-encoder>
		</authentication-provider>
	</authentication-manager>

	<beans:bean id="logoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter">
        <beans:constructor-arg index="0" value="/login.xhtml"/>
        <beans:constructor-arg index="1">
            <beans:list>
                <beans:ref bean="securityContextLogoutHandler"/>
                <beans:ref bean="myLogoutHandler"/>
            </beans:list>
        </beans:constructor-arg>
    </beans:bean>

    <beans:bean id="securityContextLogoutHandler"                                                                                                                                                                                        class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler"/>
    <beans:bean id="myLogoutHandler" class="com.mq.updatemanager.controller.user.CustomLogoutHandler">     
    </beans:bean>	
</beans:beans>

web.xml

[B][I]<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
  <display-name>Update Manager</display-name>
  <welcome-file-list>
    <welcome-file>index.xhtml</welcome-file>
  </welcome-file-list>
  <servlet>
    <servlet-name>Faces Servlet</servlet-name>
    <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
    <load-on-startup>1</load-on-startup>
  </servlet>
  <servlet-mapping>
    <servlet-name>Faces Servlet</servlet-name>
    <url-pattern>*.xhtml</url-pattern>
  </servlet-mapping>
  <session-config>
	  <session-timeout>
	      30
	  </session-timeout>
    </session-config>
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
			classpath:dispatcher-servlet.xml
			classpath:applicationContext-security.xml
		</param-value>
  </context-param>
  <filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
    <dispatcher>FORWARD</dispatcher>
    <dispatcher>REQUEST</dispatcher>
  </filter-mapping>
  <listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  </listener>
  <listener>
    <listener-class>org.springframework.web.context.request.RequestContextListener</listener-class>
  </listener>
  <listener>
    <listener-class>org.springframework.security.web.session.HttpSessionEventPublisher</listener-class>
  </listener>
  <context-param>
    <description>State saving method: 'client' or 'server' (=default). See JSF Specification 2.5.2</description>
    <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
    <param-value>client</param-value>
  </context-param>
  <context-param>
    <param-name>javax.servlet.jsp.jstl.fmt.localizationContext</param-name>
    <param-value>resources.application</param-value>
  </context-param>
  <listener>
    <listener-class>com.sun.faces.config.ConfigureListener</listener-class>
  </listener>
</web-app>[/I][/B]

UserLoginService.java

[B][I]package com.mq.updatemanager.dao;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import com.mq.updatemanager.domain.Users;
import com.mq.updatemanager.domain.derived.UserDetailsAdapter;


/**
 * The Class UserLoginService
 */
public class UserLoginService implements UserDetailsService {

	/** The user dao. */
	private UserDAO userDao;
	private Users users;

	/**
	 * Sets the user dao.
	 * 
	 * @param u
	 *            the new user dao
	 */
	public void setUserDAO(UserDAO userDAO) {
		userDao = userDAO;
	}

	/*
	 * (non-Javadoc)
	 * 
	 * @see org.springframework.security.core.userdetails.UserDetailsService#
	 * loadUserByUsername(java.lang.String)
	 */
	public  UserDetails loadUserByUsername(String userLogin) {
		
		System.out.println("helo : " +userLogin);
		if ((userLogin) != null && !((userLogin).isEmpty())) {
			Users user = userDao.getUserDetails(userLogin);
			UserDetails userDetails = new UserDetailsAdapter(user);			
			return userDetails;		
		} 
		else {
			return null;
		}
	}	
	public static UserDetails getLoggedInUser() {
		Object principal = SecurityContextHolder.getContext()
				.getAuthentication().getPrincipal();

		if (principal instanceof UserDetailsAdapter)
			return (UserDetailsAdapter) principal;
		
		return null;
	}
}[/I][/B]

Users.java

[B][I]package com.mq.updatemanager.domain;

// Generated Jan 7, 2013 5:57:29 PM by Hibernate Tools 3.4.0.CR1

import java.io.IOException;
import java.util.Date;
import java.util.HashSet;
import java.util.Set;

import javax.faces.context.ExternalContext;
import javax.faces.context.FacesContext;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

import org.springframework.security.core.GrantedAuthority;

import com.mq.updatemanager.domain.derived.UserGrantedAuthority;

/**
 * Users generated by hbm2java
 */
public class Users implements java.io.Serializable {

	private Integer id;
	private Roles roles;
	private Authenticationquestion authenticationquestion;
	private String userFirstName;
	private String userLastName;
	private String userGuid;
	private String userMobile;
	private String userEmail;
	private Date lastLogin;
	private String password;
	private byte[] certificate;
	private String salt;
	private String userLogin;
	private String authenticationAnswer;
	private Set authenticationservices = new HashSet(0);

	public Users() {
	}

	public Users(Roles roles, Authenticationquestion authenticationquestion,
			String userFirstName, String password, String salt,
			String userLogin, String authenticationAnswer) {
		this.roles = roles;
		this.authenticationquestion = authenticationquestion;
		this.userFirstName = userFirstName;
		this.password = password;
		this.salt = salt;
		this.userLogin = userLogin;
		this.authenticationAnswer = authenticationAnswer;
	}

	public Users(Roles roles, Authenticationquestion authenticationquestion,
			String userFirstName, String userLastName, String userGuid,
			String userMobile, String userEmail, Date lastLogin,
			String password, byte[] certificate, String salt, String userLogin,
			String authenticationAnswer, Set authenticationservices) {
		this.roles = roles;
		this.authenticationquestion = authenticationquestion;
		this.userFirstName = userFirstName;
		this.userLastName = userLastName;
		this.userGuid = userGuid;
		this.userMobile = userMobile;
		this.userEmail = userEmail;
		this.lastLogin = lastLogin;
		this.password = password;
		this.certificate = certificate;
		this.salt = salt;
		this.userLogin = userLogin;
		this.authenticationAnswer = authenticationAnswer;
		this.authenticationservices = authenticationservices;
	}

	public Integer getId() {
		return this.id;
	}

	public void setId(Integer id) {
		this.id = id;
	}

	public Roles getRoles() {
		return this.roles;
	}

	public void setRoles(Roles roles) {
		this.roles = roles;
	}

	public Authenticationquestion getAuthenticationquestion() {
		return this.authenticationquestion;
	}

	public void setAuthenticationquestion(
			Authenticationquestion authenticationquestion) {
		this.authenticationquestion = authenticationquestion;
	}

	public String getUserFirstName() {
		return this.userFirstName;
	}

	public void setUserFirstName(String userFirstName) {
		this.userFirstName = userFirstName;
	}

	public String getUserLastName() {
		return this.userLastName;
	}

	public void setUserLastName(String userLastName) {
		this.userLastName = userLastName;
	}

	public String getUserGuid() {
		return this.userGuid;
	}

	public void setUserGuid(String userGuid) {
		this.userGuid = userGuid;
	}

	public String getUserMobile() {
		return this.userMobile;
	}

	public void setUserMobile(String userMobile) {
		this.userMobile = userMobile;
	}

	public String getUserEmail() {
		return this.userEmail;
	}

	public void setUserEmail(String userEmail) {
		this.userEmail = userEmail;
	}

	public Date getLastLogin() {
		return this.lastLogin;
	}

	public void setLastLogin(Date lastLogin) {
		this.lastLogin = lastLogin;
	}

	public String getPassword() {
		return this.password;
	}

	public void setPassword(String password) {
		this.password = password;
	}

	public byte[] getCertificate() {
		return this.certificate;
	}

	public void setCertificate(byte[] certificate) {
		this.certificate = certificate;
	}

	public String getSalt() {
		return this.salt;
	}

	public void setSalt(String salt) {
		this.salt = salt;
	}

	public String getUserLogin() {
		return this.userLogin;
	}

	public void setUserLogin(String userLogin) {
		this.userLogin = userLogin;
	}

	public String getAuthenticationAnswer() {
		return this.authenticationAnswer;
	}

	public void setAuthenticationAnswer(String authenticationAnswer) {
		this.authenticationAnswer = authenticationAnswer;
	}

	public Set getAuthenticationservices() {
		return this.authenticationservices;
	}

	public void setAuthenticationservices(Set authenticationservices) {
		this.authenticationservices = authenticationservices;
	}
	
	public GrantedAuthority getGrantedAuthority() {
		return new UserGrantedAuthority("ROLE_ADMIN");
	}
	
	public Set<GrantedAuthority> getGrantedAuthorities() {

		Set<GrantedAuthority> grantedAuthoritySet = new HashSet();
		grantedAuthoritySet.add(this.getGrantedAuthority());
		return grantedAuthoritySet;
	}
	
	public String doLogin() throws IOException, ServletException
    {
		System.out.println("1");
        ExternalContext context = FacesContext.getCurrentInstance().getExternalContext();
        //String userName= ((HttpServletRequest)context.getRequest()).getParameter("j_username");
        System.out.println("2");
        RequestDispatcher dispatcher = ((ServletRequest)context.getRequest()).getRequestDispatcher("/j_spring_security_check");
        System.out.println("3 : " +dispatcher);
        dispatcher.forward((ServletRequest)context.getRequest(), (ServletResponse)context.getResponse());
        System.out.println("4");
        FacesContext.getCurrentInstance().responseComplete();
        System.out.println("5");
        return "secured.xhtml";
    }

    public String doLogout()
    {
        FacesContext.getCurrentInstance().getExternalContext().invalidateSession();
        return "index.xhtml";
    }
}[/I][/B]

face-config.xml

[B][I]<?xml version="1.0" encoding="UTF-8"?>
<faces-config xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
    http://java.sun.com/xml/ns/javaee/web-facesconfig_2_0.xsd"
	version="2.0">

	<application>
		<el-resolver>org.springframework.web.jsf.el.SpringBeanFacesELResolver</el-resolver>
	</application>
	
	<managed-bean>
		<managed-bean-name>login</managed-bean-name>
		<managed-bean-class>com.mq.updatemanager.domain.Users</managed-bean-class>
		<managed-bean-scope>request</managed-bean-scope>
	</managed-bean>

</faces-config>[/I][/B]

login.xhtml

[B][I]
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
	xmlns:h="http://java.sun.com/jsf/html"
	xmlns:ui="http://java.sun.com/jsf/facelets"
	xmlns:c="http://java.sun.com/jsp/jstl/core"
	xmlns:f="http://java.sun.com/jsf/core"
	xmlns:p="http://primefaces.org/ui">
<h:head>
	<title>login</title>
	<title>Login</title>
	<link rel="stylesheet" href="WebContent/stylesheets/design.css"
		type="text/css"></link>
	<link rel="styleSheet" href="WebContent/stylesheets/newWeb.css"
		type="text/css" />
	<script type="text/javascript"
		src="WebContent/scripts/jquery-1.7.1.min.js"></script>
	<script type="text/javascript">
	    $(function(){
	    	$('#submit').click(function(){
	    	$('.password').show();
	    	
	    });
	    });
    </script>
</h:head>
<h:body onload="focus_Field()">
	<div id="wrapper">
		<div id="header">
			<img alt="" src="WebContent/images/logo_indx.png"></img>
			<div class="toplinks">
				<a href="#">Help?</a>
			</div>
		</div>
		<div id="wrapperscnd">
			<div id="components">
				<div id="leftcomponent">
					<h:form action="#">
						<table cellpadding="3" align="center" cellspacing="4" border="0">
							<tr class="userid">
								<td align="right" height="32px"><h:outputLabel
										value="UserName"></h:outputLabel></td>
								<td align="right">
									<h:inputText value="#{login.userLogin}" name="j_username" title="Enter Username">
									</h:inputText>
								</td>
							</tr>
							<tr class="password">
								<td align="right">
									<h:outputLabel value="Password">
									</h:outputLabel>
								</td>
								<td align="right">
									<h:inputSecret name="j_password"
										value="#{login.password}" title="Enter Password">
									</h:inputSecret>
								</td>
							</tr>
							<tr class="submit">
								<td></td>
								<td align="left">
									<h:commandButton type="submit" id="login" value="Login" 
										styleClass="button1" action="#{login.doLogin}">
									</h:commandButton>
								</td>
							</tr>
						</table>
					</h:form>
					
				</div>
				<div id="rightcomponents">
					<p>
						Strengthen the Authentication & Authorisation strategy for
						controlling access to the Devices, Networks and Applications<br />
						
<span><a href="#">Self Help</a> </span>
					</p>
				</div>
				<div class="footer">
					<div class="leftfoot">
						<img src="WebContent/images/logobotm.png" />
					</div>
				</div>
			</div>
		</div>
	</div>
</h:body>
</html>[/I][/B]

STACKTRACE


12:56:49.953 48864 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/login.xhtml'; against '/login.xhtml'
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login.xhtml; Attributes: [permitAll]
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.access.vote.AffirmativeBased - Voter: org.springframework.security.web.access.expression.WebExpressionVoter@54f169, returned: 1
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml reached end of additional filter chain; proceeding with original chain
1
2
3 : org.apache.catalina.core.ApplicationDispatcher@101f287
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.010 48921 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.010 48921 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Request is to process authentication
12:56:50.014 48925 [http-8080-1] DEBUG org.springframework.security.authentication.ProviderManager - Authentication attempt using org.springframework.security.authentication.dao.DaoAuthenticationProvider
helo :
12:56:50.015 48926 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.authentication.event.AuthenticationFailureServiceExceptionEvent[source=org.springframework.security.authentication.UsernamePasswordAuthenticationToken@1c065: Principal: ; Credentials: [PROTECTED]; Authenticated: false; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Not granted any authorities]
12:56:50.015 48926 [http-8080-1] DEBUG org.springframework.beans.factory.support.DefaultListableBeanFactory - Returning cached instance of singleton bean 'org.springframework.security.core.session.SessionRegistryImpl#0'
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Authentication request failed: org.springframework.security.authentication.AuthenticationServiceException: UserDetailsService returned null, which is an interface contract violation
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Updated SecurityContextHolder to contain null Authentication
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Delegating to authentication failure handlerorg.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler@5f8245
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Interactive login attempt was unsuccessful.
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Cancelling cookie
12:56:50.018 48929 [http-8080-1] DEBUG org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler - Redirecting to /login.xhtml?error=true
12:56:50.019 48930 [http-8080-1] DEBUG org.springframework.security.web.DefaultRedirectStrategy - Redirecting to '/Updatemanager/login.xhtml?error=true'
12:56:50.019 48930 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
4
5
12:56:50.027 48938 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.027 48938 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.030 48941 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.034 48945 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.034 48945 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/login.xhtml'; against '/login.xhtml'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login.xhtml?error=true; Attributes: [permitAll]
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.access.vote.AffirmativeBased - Voter: org.springframework.security.web.access.expression.WebExpressionVoter@54f169, returned: 1
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true reached end of additional filter chain; proceeding with original chain
12:56:50.048 48959 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.049 48960 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.049 48960 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.113 49024 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/stylesheets/design.css'; against '/login.xhtml'
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/stylesheets/design.css]
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css reached end of additional filter chain; proceeding with original chain
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.121 49032 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.121 49032 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/stylesheets/newweb.css'; against '/login.xhtml'
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/stylesheets/newWeb.css]
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css reached end of additional filter chain; proceeding with original chain
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.127 49038 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.131 49042 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/scripts/jquery-1.7.1.min.js'; against '/login.xhtml'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/scripts/jquery-1.7.1.min.js]
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js reached end of additional filter chain; proceeding with original chain
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.135 49046 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.136 49047 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/images/logo_indx.png'; against '/login.xhtml'
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/images/logo_indx.png]
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png reached end of additional filter chain; proceeding with original chain
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.173 49084 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/images/logobotm.png'; against '/login.xhtml'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/images/logobotm.png]
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png reached end of additional filter chain; proceeding with original chain
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.178 49089 [http-8080-2] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
13:27:18.573 1877484 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.security.web.session.HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@17777a1]
13:27:18.588 1877499 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@17777a1]
13:27:18.589 1877500 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.beans.factory.support.DefaultListableBeanFactory - Returning cached instance of singleton bean 'org.springframework.security.core.session.SessionRegistryImpl#0'

I am not able to login as i am repeatedly indicated the above mentioned exception(highlighted in the STACKTRACE)

Any help would be greatly appreciated

Thanks
Anandh

[Sagar Rohankar]

Anyone can get frightened by looking at such big code snippets, you've to learn public-forum-question-writing skill.

anyway, this line explains it all:

12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Authentication request failed: org.springframework.security.authentication.AuthenticationServiceException: [b]UserDetailsService returned null, which is an interface contract violation[/b]

Don't return null.