Loading during j_spring_security_check other functions

[internet]

Hello all,
I have a problem after my login:

My login works.
But now: After login I want to redirect to a page with datatables.
The problem is now, that I must load this tables to load the entries.
So I must call my functions to load this entries in my datatable.
How and where can I fix this?

[Luke Taylor]

Not really sure what the problem is... Can't you just use a standard MVC controller for the page you want to redirect to, and load the data there?

[internet]

Can't you just use a standard MVC controller for the page you want to redirect to, and load the data there?

Yes, I think so.
Can you show me the code please?

I don´t know which classes form Spring Security I should to be use for this function.

[Luke Taylor]

They aren't Spring Security classes, just plain Spring ones. If you don't understand Spring MVC then you can use a plain servlet.

[internet]

Okay, I have an idea.
But I need the login-information (username, password, enable) after the action: /j_spring_security_check

		 
<h:form id="formLoginEingabe" action="/j_spring_security_check" method="post">

<h:panelGrid id="loginGrid" columns="3">
						
	<h:outputLabel value="RACF:"/>
	<h:inputText id="j_username" size="30" styleClass="inputText"/>
		
	<h:outputLabel  value="Password:"/>
	<h:inputSecret  id="j_password"  size="30" styleClass="inputText"/>
        
        <h:commandButton action="#{auth.startpage}" value="Login"/>
  </h:panelGrid>
</h:form>

Here my function startpage():
The red words are the issues.
I need the UserDetails in this function.
How can I get this information????

public String startpage()  {
		
		Map<String, Object> sessionMap = FacesContext.getCurrentInstance().getExternalContext().getSessionMap();
		us.getUsername();
		
try{
	ExternalContext ext=FacesContext.getCurrentInstance().getExternalContext();
	findUser = (User) ext.getSessionMap().get(AuthMgdBean.USER_LOGIN);			

// Admin
if(findUser.getRole().equals(Constants.ROLE_ADMIN)){
		sessionMap.put(ADMIN, findUser);

		newsBean.findNews();
		vvBean.reporting();

		return "/admin/index";
	}			
}

[Luke Taylor]

Please check the manual for more information.

[internet]

Thank you for your reply.

1. I have a problem to get my role (Authority).
2. How can I get the whole Object "User"?

public String startpage() throws ServletException, IOException{	
Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();
		
String role;
					
if (principal instanceof UserDetails) {

	role = ((GrantedAuthority)principal).getAuthority();
} else {
				
	role = principal.toString();
}  
		
Map<String, Object> sessionMap = FacesContext.getCurrentInstance().getExternalContext().getSessionMap();
		
	if(role.equals("ROLE_ADMIN")){

			sessionMap.put(ADMIN, findBenutzer);
			sessionMap.put(BENUTZER_EINGELOGGT, findBenutzer);
									
			newsBean.findNews();
			vvBean.reporting();

			return "/admin/ok";
		}

[Luke Taylor]

The principal is the user object. Or whatever is returned by the authentication provider... Please read the technical overview chapter to get an understanding of how things fit together.

[internet]

Only one question:

How can I get the role (GrantedAuthority) from the principal?
My problem is, that GrantedAuthority is a list.
So I cannot got this Property over a "get-Property".