Cookie problem when using spring security 2.0.1
Hi all,
i want to auto login by cookie, and i got my config like this:
Code:
<bean id="springSecurityFilterChain" class="org.springframework.security.util.FilterChainProxy">
<property name="filterInvocationDefinitionSource">
<value>
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
PATTERN_TYPE_APACHE_ANT
/**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,exceptionTranslationFilter,rememberMeProcessingFilter,filterInvocationInterceptor
</value>
</property>
</bean>
<bean id="rememberMeProcessingFilter" class="org.springframework.security.ui.rememberme.RememberMeProcessingFilter">
<property name="rememberMeServices" ref="rememberMeServices"/>
<property name="authenticationManager" ref="authenticationManager"/>
</bean>
<bean id="rememberMeServices" class="org.springframework.security.ui.rememberme.TokenBasedRememberMeServices">
<property name="tokenValiditySeconds" value="2678400"/>
<property name="key" value="myproj"/>
<property name="userDetailsService" ref="jdbcDaoImpl" />
</bean>
<bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager">
<property name="providers">
<list>
<ref local="daoAuthenticationProvider"/>
<bean class="org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider">
<property name="key" value="myproj"/>
</bean>
</list>
</property>
<property name="sessionController">
<ref bean="concurrentSessionController"/>
</property>
</bean>
<bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider">
<property name="userDetailsService" ref="jdbcDaoImpl"/>
<property name="userCache" ref="userCache"/>
<property name="passwordEncoder" ref="passwordEncoder"/>
</bean>
<bean id="authenticationProcessingFilter" class="filter.UserAuthenticationProcessingFilter"> <property name="authenticationManager" ref="authenticationManager"/>
<property name="userService" ref="userService"/>
<property name="authenticationFailureUrl">
<value>/login.jsp</value>
</property>
<property name="defaultTargetUrl">
<value>/pages/intoIndex.action</value>
</property>
<property name="filterProcessesUrl">
<value>/j_spring_security_check</value>
</property>
<property name="exceptionMappings">
<value>
org.springframework.security.userdetails.UsernameNotFoundException=/login.jsp?login_error=user_not_found_error
org.springframework.security.BadCredentialsException=/login.jsp?login_error=user_psw_error
org.springframework.security.concurrent.ConcurrentLoginException=/login.jsp?login_error=too_many_user_error
</value>
</property>
<property name="rememberMeServices" ref="rememberMeServices"/>
</bean>
when i try to login by cookie i got these messages:
Code:
DEBUG org.springframework.security.util.FilterChainProxy - //login.jsp at position 6 of 7 in additional filter chain; firing Filter: 'org.springframework.security.ui.rememberme.RememberMeProcessingFilter[ order=1300; ]'
DEBUG org.springframework.security.ui.rememberme.TokenBasedRememberMeServices - Remember-me cookie detected
DEBUG org.springframework.security.ui.rememberme.TokenBasedRememberMeServices - Remember-me cookie accepted
DEBUG org.springframework.security.providers.ProviderManager - Authentication attempt using org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider
DEBUG org.springframework.security.concurrent.SessionRegistryImpl - Registering session 9D8670EE917A99EF23C679216B358AEB, for principal myname
it seemed that cookie is accepted, but it didn't login into the app but return to the login page.
i am puzzled, and i think that there is something wrong with the config, anyone can give me some tips?
thanks to all.
