Spring Login Issues (Using Maven, spring-data-jpa, Hibernate and spring Security)

[Daniel Demesmaecker]

I'm experimenting a bit with spring and I tried to wright my first secured application.
Only the homepage, the loginpage and the sign-uppage are visitable without loging in an when you try to click on a button in the homepage you're redirected to the loginpage.
So far so good. I'm able to visit the homepage, I'm beïng redirected, I also can register (I checked with datagrip),
But when I try to log in, the page refeshes and nothing happens.
I don't even get a error, no tracestack nothing.
First I had a seperate entity and repository for my role table and had joined the to tables on users.id and role.userId, but then I thought maybe I joined them wrong or something, so I removed my roleEntity and repository and simply putted a extra fiels in my usersEntity but the result is the same.
How do you debug if you have no error or stacktrace?

My WebsecurityConfig:

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {


    @Autowired
    private BCryptPasswordEncoder bCryptPasswordEncoder;

    @Autowired
    private @Qualifier("dataSource") DataSource dataSource;

    @Value("${spring.queries.users-query}")
    private String usersQuery;

    @Value("${spring.queries.roles-query}")
    private String rolesQuery;

    @Override
    protected void configure(AuthenticationManagerBuilder auth)
            throws Exception {
        auth.
                jdbcAuthentication()
                .usersByUsernameQuery(usersQuery)
                .authoritiesByUsernameQuery(rolesQuery)
                .dataSource(dataSource)
                .passwordEncoder(bCryptPasswordEncoder);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {

        http.
                authorizeRequests()
                .antMatchers("/").permitAll()
                .antMatchers("/login").permitAll()
                .antMatchers("/register").permitAll()
                .antMatchers("/users/**").hasAuthority("USER").anyRequest()
                .authenticated().and().formLogin()
                .loginPage("/login").failureUrl("/login?error=true")
                .failureForwardUrl("/loginError")
                .defaultSuccessUrl("/")
                .usernameParameter("username")
                .passwordParameter("password")
                .and().logout()
                .logoutRequestMatcher(new AntPathRequestMatcher("logout"))
                .logoutSuccessUrl("/").and().exceptionHandling()
                .accessDeniedPage("/loginError")
                .and()
                .csrf();
    }

    @Override
    public void configure(WebSecurity web) throws Exception {
        web
                .ignoring()
                .antMatchers("/resources/**", "/static/**", "/css/**", "/js/**", "/images/**");
    }
}

My LoginController:

@Controller
@RequestMapping("login")
public class LoginController {
    @Autowired
    private LoginService loginService;
    private String referrer = "loginSucces";

    @RequestMapping(method = RequestMethod.GET)
    public String handleGet(ModelMap model, HttpSession session, HttpServletRequest request) {
        referrer = request.getHeader(HttpHeaders.REFERER);
        if (session.getAttribute("username") != null) {
            return "home";
        }
        model.addAttribute("returnPreviousPage", referrer);
        User loginForm = new User();
        model.put("loginForm", loginForm);
        return "login";
    }

    //SpringBoot should do this automaticly?
 /*   @RequestMapping(method = RequestMethod.POST)
    public ModelAndView processLogin(@ModelAttribute("loginForm") User user, Map<String, Object> model) {
        String username = user.getUsername();
        String password = user.getPassword();
        String message;
        if (username.isEmpty() || password.isEmpty()) {
            message = "Sorry, can't leave any fields empty.\nPlease Try again.";
            return new ModelAndView("login", "message", message);
        }
        if (loginService.checkUsercredentials(username, password)) {
            message = "Login Succes, Welkom " + username + "!";
            return new ModelAndView("home", "message", message);
        } else {
            message = "Sorry, invalid login credentials.\nPlease Try again.";
            return new ModelAndView("login", "message", message);
        }
    }*/

}

My UsersEntity:

@Entity
@Table(name = "users")
public class User implements Serializable {
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    @Column(name = "id")
    @JoinColumn(name = "role.userId")
    private int id;
    @Column(name = "firstname")
    private String firstname;
    @Column(name = "lastname")
    private String lastname;
    @Column(name = "username", unique = true)
    @NotEmpty(message = "You must provide a unique password!")
    private String username;
    @Column(name = "email", unique = true)
    @Email(message = "*Please provide a valid Email")
    @NotEmpty(message = "*Please provide an email")
    private String email;
    @Column(name = "birthday")
    private Date bDay;
    @Column(name = "password")
    @Length(min = 5, message = "*Your password must have at least 5 characters")
    @NotEmpty(message = "*Please provide your password")
    private String password;
    @Transient
    private String passwordCheck;
    private boolean enabled = true;
    @Column(name = "active")
    private int active;
    private String role = "user";

    public String getFirstname() {
        return firstname;
    }

    public void setFirstname(String firstname) {
        this.firstname = firstname;
    }

    public String getLastname() {
        return lastname;
    }

    public void setLastname(String lastname) {
        this.lastname = lastname;
    }

    public String getUsername() {
        return username;
    }

    public void setUsername(String username) {
        this.username = username;
    }

    public String getEmail() {
        return email;
    }

    public void setEmail(String email) {
        this.email = email;
    }

    public Date getbDay() {
        return bDay;
    }

    public void setbDay(Date bDay) {
        this.bDay = bDay;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public String getPasswordCheck() {
        return passwordCheck;
    }

    public void setPasswordCheck(String passwordCheck) {
        this.passwordCheck = passwordCheck;
    }

    public boolean isEnabled() {
        return enabled;
    }

    public void setEnabled(boolean enabled) {
        this.enabled = enabled;
    }

    public int getActive() {
        return active;
    }

    public void setActive(int active) {
        this.active = active;
    }

    public String getRole() {
        return role;
    }

    public void setRole(String role) {
        this.role = role;
    }

    @Override
    public String toString() {
        return "User{" +
                "id=" + id +
                ", firstname='" + firstname + '\'' +
                ", lastname='" + lastname + '\'' +
                ", username='" + username + '\'' +
                ", email='" + email + '\'' +
                ", bDay=" + bDay +
                ", password='" + password + '\'' +
                ", passwordCheck='" + passwordCheck + '\'' +
                ", enabled=" + enabled +
                ", active=" + active +
                '}';
    }
}

My sqlStatements to Login:

spring.queries.users-query=select username,password,enabled from users where username=?
spring.queries.roles-query=select username, password, role from users u where u.username=?

[Dana Ucaed]

You must learn how to use logging in your entity.