authenticate user using form in the dialog window

I have implemented using OAuth.
Now I have a popup window with a form that supposed to allow a user to login by providing his credentials. The form is expected to submit its data to /login url, where I should validate user parameters and authenticate him.

The thing is that I supposed to see a default page with limited functionality by default.

Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration

    http

        .antMatcher("/**").authorizeRequests()

        .antMatchers(

            "/",

            "/csrf-token",

            "/oauth**",

            "/error**",

            "/swagger-resources/**",

            "/swagger-ui.html",

            "/v2/api-docs",

            "/webjars/**",

            "/login")

        .permitAll()

        .anyRequest().authenticated()

        .and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")

        ...;

I am able to see a form on /login page when I directly access it in the browser.

But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

add a comment |

The thing is that I supposed to see a default page with limited functionality by default.

Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration

    http

        .antMatcher("/**").authorizeRequests()

        .antMatchers(

            "/",

            "/csrf-token",

            "/oauth**",

            "/error**",

            "/swagger-resources/**",

            "/swagger-ui.html",

            "/v2/api-docs",

            "/webjars/**",

            "/login")

        .permitAll()

        .anyRequest().authenticated()

        .and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")

        ...;

I am able to see a form on /login page when I directly access it in the browser.

But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

add a comment |

The thing is that I supposed to see a default page with limited functionality by default.

Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration

    http

        .antMatcher("/**").authorizeRequests()

        .antMatchers(

            "/",

            "/csrf-token",

            "/oauth**",

            "/error**",

            "/swagger-resources/**",

            "/swagger-ui.html",

            "/v2/api-docs",

            "/webjars/**",

            "/login")

        .permitAll()

        .anyRequest().authenticated()

        .and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")

        ...;

I am able to see a form on /login page when I directly access it in the browser.

But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

The thing is that I supposed to see a default page with limited functionality by default.

Originally I thought I should use formLogin of Spring security. In my configure method of WebSecurityConfigurerAdapter class I defined configuration

    http

        .antMatcher("/**").authorizeRequests()

        .antMatchers(

            "/",

            "/csrf-token",

            "/oauth**",

            "/error**",

            "/swagger-resources/**",

            "/swagger-ui.html",

            "/v2/api-docs",

            "/webjars/**",

            "/login")

        .permitAll()

        .anyRequest().authenticated()

        .and().formLogin().permitAll().loginProcessingUrl("/login").defaultSuccessUrl("/")

        ...;

I am able to see a form on /login page when I directly access it in the browser.

But how to implement the case when the form is not on a separate page and just a part of other functionally? Should I just implement a separate POST handler for some url like /login?

java spring-boot spring-security

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

edited Nov 12 at 19:04

asked Nov 12 at 18:54

lapots

3,6251260127

asked Nov 12 at 18:54

lapots

3,6251260127

asked Nov 12 at 18:54

lapots

3,6251260127

add a comment |

active

oldest

votes

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});

}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53268386%2fauthenticate-user-using-form-in-the-dialog-window%23new-answer', 'question_page');
}
);

Post as a guest

Name

Required, but never shown

active

oldest

votes

draft saved

draft discarded

Thanks for contributing an answer to Stack Overflow!

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

Some of your past answers have not been well-received, and you're in danger of being blocked from answering.

Please pay close attention to the following guidance:

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Name

Required, but never shown

Name

Required, but never shown

This page is only for reference, If you need detailed information, please check here

搜尋此網誌

Vfrdtyky