Spring Security
here i have used form-login to configure spring security login.
if you want to restrict user to access all url and want to allow specific url portion then you can use do that by <intercept-url />
and using form-login we can control the user authentication filer or success.and we can display our custom login form.
when you are using <http-basic /> then web browser is displaying a log in dialog for user authentication.
To enable HTTP basic, just change “form-login” to “http-basic” tag.
if you want to restrict user to access all url and want to allow specific url portion then you can use do that by <intercept-url />
and using form-login we can control the user authentication filer or success.and we can display our custom login form.
when you are using <http-basic /> then web browser is displaying a log in dialog for user authentication.
To enable HTTP basic, just change “form-login” to “http-basic” tag.
Spring-security.xml
<beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.3.xsd"> <http> <intercept-url pattern="/welcome*" access="ROLE_USER" />
<form-login login-page="/login" default-target-url="/welcome"
authentication-failure-url="/loginfailed" />
<logout logout-success-url="/logout" />
</http>
<authentication-manager>
<authentication-provider>
<user-service>
<user name="jayesh" password="jayesh" authorities="ROLE_USER" />
</user-service>
</authentication-provider>
</authentication-manager>
</beans:beans>
login.jsp<%@taglib uri="http://www.springframework.org/tags" prefix="spring"%> <%@taglib uri="http://www.springframework.org/tags/form" prefix="form"%> <html> <head> <title>Spring 3 MVC Series - Contact Manager</title> </head> <body> <form action="j_spring_security_check" method="POST"> UserName: <input type="text" name="j_username" /> Password: <input type="password" name="j_password" /> <input type="submit" value="Login" /> </form> </body> </html>
Thanks for this post. I'm new to Liferay and I need to implement a custom login for Liferay 6.1 using Spring Security and OAuth. Can you provide advice on the best way to do this and maybe provide some code samples if possible? Thanks so much!
ReplyDelete