AngularJS post submit login form to Spring security

[Itamar Levi]

hello,

i am using spring security with angularJS.
i submit login form with username and password on post request to the spring security on the server.

the problem is that the authentication fail.
in spring security its fail on UsernamePasswordAuthenticationFilter.java filter
because request.getParameter(usernameParameter); returns null for my post request.


in class UsernamePasswordAuthenticationFilter.java method attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
the attemp is valid only for post request request.getMethod().equals("POST")
but next it try to retrieve username parameter from the post request ( request.getParameter(usernameParameter); ) which return null.

my login post request is :

$http({
        method: 'POST',
        url: '/TryMe/authenticate',
        data: {},
        headers: {"Authorization": "Basic " + btoa($scope.credentials.username + ":" + $scope.credentials.password)}
    }).
        then(function (response) {
            $scope.spheres = response.data.Spheres;
            console.log($scope.spheres);
        }, function (data, status, headers, config) {
            console.log(data);
            console.log(status);
            console.log(headers);
        });

spring filter code :

public Authentication attemptAuthentication(HttpServletRequest request,
			HttpServletResponse response) throws AuthenticationException {
		if (postOnly && !request.getMethod().equals("POST")) {
			throw new AuthenticationServiceException(
					"Authentication method not supported: " + request.getMethod());
		}

		String username = obtainUsername(request);  ( is -->  request.getParameter(usernameParameter);)
		String password = obtainPassword(request);
....
...
}

1. why do i get username null? how can i fix it?
2. it is POST request can we get parameter from the request by request.getParameter()?

Itamar.

[Youdhveer Panwar]

Try to send userName and password in data array

data: {username:$scope.credentials.username,password:$scope.credentials.password},