spring security issue

[maheedar sand]

Hi,


Good Morning to the World!!!

Hope everyone is doing good.

I started learning spring security. I created a sample application as mentioned in book and run the application in jetty server.
The application should ask for the username and password before displaying the "Hello World" content. But it is displaying the content directly without showing the login form.
At runtime it is picking applicationContext-security.xml eventhough it is configured in DD.
Please go through the code below:

HelloWorldServlet.java

package com.appress.pss.servlets;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Servlet implementation class HelloWorldServlet
 */
@WebServlet(urlPatterns = {"/hello"})
public class HelloWorldServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;

	/**
	 * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		try	{
			response.getWriter().write("Hello World");
		}
		catch(IOException e)	{
			e.printStackTrace();
		}
	}

}

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee"
	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
	      http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
	      version="3.0">
	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>	
	
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>/WEB-INF/applicationContext-security.xml</param-value>
	</context-param>
	
	<filter>
		<filter-name>springSecurityFilterChain</filter-name>
		<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
	</filter>
	
	<filter-mapping>
		<filter-name>springSecurityFilterChain</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>
	
	
</web-app>

applicationSecurity-context.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd
		http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd">
		
	<security:http auto-config="true">
		<security:intercept-url pattern="/hello" access="ROLE_USER_MEMEBER"/>
	</security:http>
	
	<security:authentication-manager>	
		<security:authentication-provider>
			<security:user-service>
				<security:user authorities="ROLE_USER_MEMBER" name="test" password="test123" /> 
			</security:user-service>
		</security:authentication-provider>
	</security:authentication-manager>
</beans>

This is a maven project which runs on the jetty server.

My doubt with the above code is I am making use of both annotations and xml (DD). Is this leading to confusion to compiler. Please suggest me where I'm mistaken.

Thank You to everyone for the help.

Thanks and Regards,
G.Sathish Kumar.

[maheedar sand]

Hi,

I have solved the issue. The issue is with maven project structure.
Thank You for everyone for their time and patience.

Thanks and Regards,
G.Sathish Kumar