Question

每当我尝试登录到我的应用程序时，它都会使用我的invalidLogin控制器。我感觉问题出在我的LoginConfig上，但是我不确定他的问题是什么。我的LoginConfig：

@EnableWebSecurity
@Configuration
public class LoginConfig extends WebSecurityConfigurerAdapter {

    protected void configure(HttpSecurity http) throws Exception {
        http.requiresChannel ()
            .anyRequest()
            .requiresSecure()
            .and().formLogin().loginPage("/login-page").loginProcessingUrl("/login")
            .defaultSuccessUrl("/login-pass",true).failureUrl("/login-fail").permitAll()
            .and().logout().invalidateHttpSession(true).logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
            .logoutSuccessUrl("/login-page")
            .permitAll()
            .and().authorizeRequests().anyRequest().authenticated();
    }
    @Autowired 
    private UserDetailsService userDetailsService;  

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        BCryptPasswordEncoder pe = new  BCryptPasswordEncoder();
        auth.userDetailsService(userDetailsService).passwordEncoder(pe);

    }

}

这是我的登录控制器：

@Controller
public class LoginController {
    @Autowired UserLoginRepository userRepo;

    @RequestMapping(value="/login-page", method=RequestMethod.GET)
    public String loginForm() {
        System.out.println("welcome to log in page");
        return "security/login-form";

    }

    @RequestMapping(value="/login-fail", method=RequestMethod.GET)
    public String invalidLogin(Model model) {
        model.addAttribute("error", true);
        System.out.println("failed LOGIN");
        return "security/login-form";
    }

    @RequestMapping(value="/login-pass", method=RequestMethod.GET)
    public String successLogin() { 
        System.out.println("success");
        return "deck-page";
    }
}

最后是我的登录表单jsp：

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<%@taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>Login page</title>
<style>
.error {
    color: red;
}
</style>
</head>
<body>
<h1>Login page</h1>

<p>
<c:if test="${error == true}">
    <b class="error">Invalid login or password.</b>
</c:if>
<c:if test="${logout == true}">
    <b class="logout">You have been logged out.</b>
</c:if>
</p>

    <form action="/login" method="post">       
        <p>
            <label for="username">Username</label>
            <input type="text" id="username" name="username"/>  
        </p>
        <p>
            <label for="password">Password</label>
            <input type="password" id="password" name="password"/>  
        </p>
        <input type="hidden"                        
            name="${_csrf.parameterName}"
            value="${_csrf.token}"/>
        <button type="submit" class="btn">Log in</button>
    </form> 

</body>
</html>

所以我知道控制器就像失败的登录工作一样工作。在运行中，我具有以下代码来设置用户：

    BCryptPasswordEncoder pe = new  BCryptPasswordEncoder();
    Users user = new Users();
    user.setLogin("joe");
    user.setPassword(pe.encode("123456"));
    userRepo.save(user);

Furthermore, checking my SQL I can see that it stores the the username and password

Answer 1

我通过创建一个链接我的Users类的类来修复它，以便它可以正确地进行比较。

@Service
public class TopTrumpUserDetailsServices implements UserDetailsService {

    @Autowired
    private UserLoginRepository userRepo;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        TopTrumpUser u = userRepo.findByUsername(username);
        List<GrantedAuthority> authorities = new ArrayList<>();
        return new User(u.getUsername(), u.getPassword(), authorities);
    }

}

Spring MVC-尽管用户名和密码正确，但仍将我重定向到我的登录失败映射

1 个答案: