login manually with spring security

[meisam sabzi]

Hi there

I have problem with login manually  with spring security
There is a login page with Qr code(I can put every want need to it)and  we have mobile have contain username.
when user scan the Qr code with  app ,user must be logged in .

I found this code for login:

public void login(HttpServletRequest req, String user, String pass) {
        System.out.println(req.getSession().getId());

        UsernamePasswordAuthenticationToken authReq
                = new UsernamePasswordAuthenticationToken(user, pass);
        Authentication auth = authenticationManager.authenticate(authReq);

        SecurityContext sc = SecurityContextHolder.getContext();
        sc.setAuthentication(auth);
        HttpSession session = req.getSession(true);
        session.setAttribute(SPRING_SECURITY_CONTEXT_KEY, sc);
    }

but I don't know how to use it and how to logged in user automatically

I mean when user scan the qr code the page must be redirect to dashboard
I can create a web socket but I don't know how use it.
I need this .please help me.
sorry for my english

[Salil Wadnerkar]

What you pasted is a simple username-password authentication. Check out: https://www.baeldung.com/spring-security-two-factor-authentication-with-soft-token

[meisam sabzi]

I try with this but not wor

[Claude Moore]

Salil Wadnerkar wrote:What you pasted is a simple username-password authentication. Check out: https://www.baeldung.com/spring-security-two-factor-authentication-with-soft-token

Thanks for sharing it.

[meisam sabzi]

Claude Moore wrote:

Salil Wadnerkar wrote:What you pasted is a simple username-password authentication. Check out: https://www.baeldung.com/spring-security-two-factor-authentication-with-soft-token

Thanks for sharing it.

Is this worked for you?

[Claude Moore]

meisam sabzi wrote:

Claude Moore wrote:

Salil Wadnerkar wrote:What you pasted is a simple username-password authentication. Check out: https://www.baeldung.com/spring-security-two-factor-authentication-with-soft-token

Thanks for sharing it.

Is this worked for you?

Didn't try it, but it looks promising and very similar to your use case. My suggestion is to get a copy of that example, study how it works, and adapt it to your needs. Understanding a sample code is crucial, otherwise you'll end building brittle code. Take inspiration from code, not just copy it.