authenticate user using form in the dialog window
I have implemented using OAuth.
Now I have a popup window with a form that supposed to allow a user to login by providing his credentials. The form is expected to submit its data to /login url, where I should validate user parameters and authenticate him.
The thing is that I supposed to see a default page with limited functionality by default.
Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration
http
.antMatcher("/**").authorizeRequests()
.antMatchers(
"/",
"/csrf-token",
"/oauth**",
"/error**",
"/swagger-resources/**",
"/swagger-ui.html",
"/v2/api-docs",
"/webjars/**",
"/login")
.permitAll()
.anyRequest().authenticated()
.and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")
...;
I am able to see a form on /login page when I directly access it in the browser.
But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?
java spring-boot spring-security
asked Nov 12 at 18:54
lapots
3,6251260127
add a comment |
I have implemented using OAuth.
Now I have a popup window with a form that supposed to allow a user to login by providing his credentials. The form is expected to submit its data to /login url, where I should validate user parameters and authenticate him.
The thing is that I supposed to see a default page with limited functionality by default.
Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration
http
.antMatcher("/**").authorizeRequests()
.antMatchers(
"/",
"/csrf-token",
"/oauth**",
"/error**",
"/swagger-resources/**",
"/swagger-ui.html",
"/v2/api-docs",
"/webjars/**",
"/login")
.permitAll()
.anyRequest().authenticated()
.and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")
...;
I am able to see a form on /login page when I directly access it in the browser.
But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?
java spring-boot spring-security
asked Nov 12 at 18:54
lapots
3,6251260127
add a comment |
I have implemented using OAuth.
Now I have a popup window with a form that supposed to allow a user to login by providing his credentials. The form is expected to submit its data to /login url, where I should validate user parameters and authenticate him.
The thing is that I supposed to see a default page with limited functionality by default.
Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration
http
.antMatcher("/**").authorizeRequests()
.antMatchers(
"/",
"/csrf-token",
"/oauth**",
"/error**",
"/swagger-resources/**",
"/swagger-ui.html",
"/v2/api-docs",
"/webjars/**",
"/login")
.permitAll()
.anyRequest().authenticated()
.and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")
...;
I am able to see a form on /login page when I directly access it in the browser.
But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?
java spring-boot spring-security
asked Nov 12 at 18:54
lapots
3,6251260127
I have implemented using OAuth.
Now I have a popup window with a form that supposed to allow a user to login by providing his credentials. The form is expected to submit its data to /login url, where I should validate user parameters and authenticate him.
The thing is that I supposed to see a default page with limited functionality by default.
Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration
http
.antMatcher("/**").authorizeRequests()
.antMatchers(
"/",
"/csrf-token",
"/oauth**",
"/error**",
"/swagger-resources/**",
"/swagger-ui.html",
"/v2/api-docs",
"/webjars/**",
"/login")
.permitAll()
.anyRequest().authenticated()
.and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")
...;
I am able to see a form on /login page when I directly access it in the browser.
But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?
java spring-boot spring-security
java spring-boot spring-security
asked Nov 12 at 18:54
lapots
3,6251260127
asked Nov 12 at 18:54
lapots
3,6251260127
edited Nov 12 at 19:04
asked Nov 12 at 18:54
lapots
3,6251260127
asked Nov 12 at 18:54
lapots
3,6251260127
asked Nov 12 at 18:54
lapots
3,6251260127
3,6251260127
add a comment |
add a comment |
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53268386%2fauthenticate-user-using-form-in-the-dialog-window%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53268386%2fauthenticate-user-using-form-in-the-dialog-window%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
