Can't proceed with j_spring_security_check

[sam White]

With spring security, I am having problem with the login process.
Technologies: spring security with j_spring_security_check, spring mvc 3+, jboss 7.2.Final.

When click on the login button, it seems that the process stop at the first line of the function loadUserByUserName() funciton. Please refer to the attached code before.
Here is the debugging line jboss printed after clicking the login button:

"=======loadUserByUserName====="

Your help is very much appreciated.


jboss server log:

23:57:11,792 DEBUG [org.apache.coyote.http11] (http-/192.168.5.20:80-10) JBWEB003028: Start processing with input [form_key=gdb6Ubr5WeFJXRj1&j_username=samuel%40morfeusflex.com.au&j_password=testst&send=]
23:57:11,937 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-10) Looking up handler method for path /login
23:57:11,937 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-10) Returning handler method [public java.lang.String morfeusflex_client.controller.MainController.loginReg(javax.servlet.http.HttpServletRequest,java.util.Locale,boolean,org.springframework.ui.ModelMap)]
23:57:11,938 DEBUG [org.apache.coyote.http11] (http-/192.168.5.20:80-10) JBWEB003028: Start processing with input [error=true]
23:57:12,456 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-10) Looking up handler method for path /resources/lozastore/images/line-title.png
23:57:12,456 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-4) Looking up handler method for path /resources/lozastore/images/icon-topcart.png
23:57:12,460 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-10) Did not find handler method for [/resources/lozastore/images/line-title.png]
23:57:12,460 DEBUG [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] (http-/192.168.5.20:80-4) Did not find handler method for [/resources/lozastore/images/icon-topcart.png]
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-10) Matching patterns for request [/resources/lozastore/images/line-title.png] are [/resources/**]
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-4) Matching patterns for request [/resources/lozastore/images/icon-topcart.png] are [/resources/**]
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-10) URI Template variables for request [/resources/lozastore/images/line-title.png] are {}
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-4) URI Template variables for request [/resources/lozastore/images/icon-topcart.png] are {}
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-10) Mapping [/resources/lozastore/images/line-title.png] to HandlerExecutionChain with handler [ResourceHttpRequestHandler [locations=[ServletContext resource [/resources/]], resolvers=[org.springframework.web.servlet.resource.PathResourceResolver@49af4b39]]] and 1 interceptor
23:57:12,460 DEBUG [org.springframework.web.servlet.handler.SimpleUrlHandlerMapping] (http-/192.168.5.20:80-4) Mapping [/resources/lozastore/images/icon-topcart.png] to HandlerExecutionChain with handler [ResourceHttpRequestHandler [locations=[ServletContext resource [/resources/]], resolvers=[org.springframework.web.servlet.resource.PathResourceResolver@49af4b39]]] and 1 interceptor

CustomUserDetailsService.java:

@Override  
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {  
        logger.debug("=======loadUserByUserName=====");

            if (StringUtils.isEmpty(s)) {
                logger.debug("----- s is empty ++++===");
    //            throw new RuntimeException(e);
//                logger.info("======user email address is not valid: "+s);
//                return new User(
//                        s,
//                        "",
//                        true,
//                        true,
//                        true,
//                        true,
//                        getAuthorities(0));
                throw new UsernameNotFoundException("Please enter correct email address and password");

            }

        morfeusflex.service.customer.Customer userFromDb = customerService.findByEmailAddress(s);  
  
        logger.debug("+++++loadUserByUsername: "+userFromDb.toString()+"++++++++");
        //check if this user with this username exist, if not, throw an exception  
        // and stop the login process  
        if (userFromDb == null) {  
//            throw new UsernameNotFoundException("User details not found with this username: " + s);  
//            return new User(
//                    s,
//                    "",
//                    true,
//                    true,
//                    true,
//                    true,
//                    getAuthorities(0));
            throw new UsernameNotFoundException("Please enter correct email address and password");

        }  
  
        String password = (String) userFromDb.getPassword();
//        Integer role = userFromDb.getRoleId().getRoleId();
  
        List authList = (List) getAuthorities(0);  
  
        //get the encoded password  
//        String encodedPassword = passwordEncoder.encode(password);  
  
        User user = new User(s, password, authList);  
  
        return user;  
    }  

security.xml:

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:context="http://www.springframework.org/schema/context"
       xmlns:tx="http://www.springframework.org/schema/tx"
       xmlns:security="http://www.springframework.org/schema/security"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
                http://www.springframework.org/schema/beans/spring-beans-3.2.xsd       
                http://www.springframework.org/schema/context      
                http://www.springframework.org/schema/context/spring-context-3.2.xsd     
                http://www.springframework.org/schema/tx      
                http://www.springframework.org/schema/tx/spring-tx-3.2.xsd  
                http://www.springframework.org/schema/security     
                http://www.springframework.org/schema/security/spring-security-3.2.xsd">

    <!-- Configure Spring Security -->
    <security:http auto-config="true" use-expressions="true" access-denied-page="/auth/denied">
        <security:intercept-url pattern="/auth/login" access="permitAll"/>
        <security:intercept-url pattern="/partner/*" access="hasRole('ROLE_PARTNER')"/>
        <security:intercept-url pattern="/admin/*" access="hasRole('ROLE_ADMIN')"/>

        <security:intercept-url pattern="/ckeditor/*" access="hasRole('ROLE_ADMIN')"/>

        <!--                <security:intercept-url pattern="/j_spring_security_check" access="ROLE_SUPERVISOR" />-->
        <security:form-login
                login-page="/auth/login"
                authentication-failure-url="/auth/login?error=true"
                default-target-url="/"
                authentication-success-handler-ref="customerSimpleUrlAuthenticationSuccessHandler"/>

        <security:logout
                invalidate-session="true"
                logout-success-url="/"
                logout-url="/auth/logout"/>
    </security:http>

    <bean id="customerSimpleUrlAuthenticationSuccessHandler"
          class="poms.service.auth.CustomerSavedRequestAwareAuthenticationSuccessHandler">
        <property name="defaultAdminUrl" value="/admin/admin-home"/>
        <property name="defaultPartnerUrl" value="/partner/partner-home"/>
    </bean>

    <security:authentication-manager>
        <!-- Declare an authentication-manager to use a custom userDetailsService -->
        <security:authentication-provider user-service-ref="customUserDetailsService">
            <security:password-encoder ref="passwordEncoder"/>
        </security:authentication-provider>
    </security:authentication-manager>

    <context:annotation-config/>
    <!-- Use a Md5 encoder since the user's passwords are stored as Md5 in the database -->
    <!--<bean class="org.springframework.security.authentication.encoding.Md5PasswordEncoder" id="passwordEncoder"/>-->
    <!-- use BCrypt encoder -->
    <bean class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" id="passwordEncoder"/>
    <!-- A custom service where Spring will retrieve users and their corresponding access levels  -->
    <bean id="customUserDetailsService" class="poms.service.auth.CustomUserDetailsService"/>

    <context:component-scan base-package="poms" annotation-config="true"/>
</beans>

application log:

2015-08-29 13:55:35,421 [DEBUG] [http-/192.168.5.20:80-1] CustomUserDetailsService.class - =======loadUserByUserName=====
2015-08-29 13:55:35,740 [DEBUG] [http-/192.168.5.20:80-1] morfeusflex_client.controller.MainController - Received request to show login page

<%@ page import="morfeusflex_client.constants.MorfeusflexConstants" %>
                                            <form action="<%=MorfeusflexConstants.CONTEXT_ROOT%>/j_spring_security_check" autocomplete="on" method="post" id="login-form">
                                                <input name="form_key" type="hidden" value="gdb6Ubr5WeFJXRj1" />
                                                <div class="col2-set">
                                                    <div class="col-1 new-users">
                                                        <div class="content">
                                                            <h2>New Customers</h2>
                                                            <p>By creating an account with our store, you will be able to move through the checkout process faster, store multiple shipping addresses, view and track your orders in your account and more.</p>
                                                        </div>
                                                    </div>
                                                    <div class="col-2 registered-users">
                                                        <div class="content">
                                                            <h2>Registered Customers</h2>
                                                            <p>If you have an account with us, please log in.</p>
                                                            <ul class="form-list">
                                                                <li>
                                                                    <label for="j_username" class="required"><em>*</em>Email Address</label>
                                                                    <div class="input-box">
                                                                        <input type="text" name="j_username" id="j_username" class="input-text required-entry validate-email" title="Email Address" />
                                                                    </div>
                                                                </li>
                                                                <li>
                                                                    <label for="j_password" class="required"><em>*</em>Password</label>
                                                                    <div class="input-box">
                                                                        <input type="password" name="j_password" class="input-text required-entry validate-password" id="j_password" title="Password" />
                                                                    </div>

                                                                </li>
                                                            </ul>
                                                            <div id="window-overlay" class="window-overlay" style="display:none;"></div>
                                                            <div id="remember-me-popup" class="remember-me-popup" style="display:none;">
                                                                <div class="remember-me-popup-head">
                                                                    <h3>What's this?</h3>
                                                                    <a href="#" class="remember-me-popup-close" title="Close">Close</a>
                                                                </div>
                                                                <div class="remember-me-popup-body">
                                                                    <p>Checking "Remember Me" will let you access your shopping cart on this computer when you are logged out</p>
                                                                    <div class="remember-me-popup-close-button a-right">
                                                                        <a href="#" class="remember-me-popup-close button" title="Close"><span>Close</span></a>
                                                                    </div>
                                                                </div>
                                                            </div>

                                                            <p class="required">* Required Fields</p>
                                                            <c:if test="${not empty SPRING_SECURITY_LAST_EXCEPTION}">
                                                                <font color="red">
                                                                  Your login attempt was not successful due to <br/><br/>
                                                                  <c:out value="${SPRING_SECURITY_LAST_EXCEPTION.message}"/>.
                                                                </font>
                                                            </c:if>
                                                        </div>
                                                            
                                                    </div>
                                                </div>
                                                <div class="col2-set">
                                                    <div class="col-1 new-users">
                                                        <div class="buttons-set">
                                                            <button type="button" title="Create an Account" class="button" onclick="window.location = 'http://ecoblueocean.com/themeforest/demo/tv_lozastore1/index.php/customer/account/create/';"><span><span>Create an Account</span></span></button>
                                                        </div>
                                                    </div>
                                                    <div class="col-2 registered-users">
                                                        <div class="buttons-set">
                                                            <a href="/forgot-password" class="f-left">Forgot Your Password?</a>
                                                            <button type="submit" class="button" title="Login" name="send" id="send2"><span><span>Login</span></span></button>
                                                        </div>
                                                    </div>
                                                </div>
                                            </form>

[sam White]

the issue is I donlt know why the execution never execute at the following line:

logger.debug("+++++loadUserByUsername: "+userFromDb.toString()+"++++++++");

[Prasad Krishnegowda]

can you show us your complete log file and CustomerService class.

May be customerService.findByEmailAddress(s); throws an exception or userFromDb is null, and trying to print toString on an null object, throwing NullPointerException.