Spring security custom form login

Posted by sloede on Wed, 22 Jan 2020 12:42:49 +0100

This article mainly explains how to customize form login in spring security. Spring security provides a form login by default, but it can't be used in actual projects. This article mainly explains how to customize form login

  1. Create a spring Security Project

   1.1 using IDEA


   pom.xml will be added automatically


  2. Extend WebSecurityConfigurerAdapter

  WebSecurityConfigurerAdapter is provided by spring security for us to extend our own configuration

  to implement WebSecurityConfigurerAdapter, you often need to override:

    1,configure(AuthenticationManagerBuilder auth);
    2,configure(WebSecurity web);
    3,configure(HttpSecurity http);

   2.1 the default websecurity configureradapter provides us with some basic configurations as follows

    protected void configure(HttpSecurity http) throws Exception {
        logger.debug("Using default configure(HttpSecurity). If subclassed this will potentially override subclass configure(HttpSecurity).");

   2.2 create a custom websecurity configurer

**                                        **

    public class MyWebSecurityConfig extends WebSecurityConfigurerAdapter {

    protected void configure(HttpSecurity http) throws Exception {

  2.3 mylogin.html

    <!DOCTYPE html>
    <html lang="en">
         <meta charset="UTF-8">
        <h1>Standard landing page</h1>
        <h3>Form login</h3>
     <form action="/login" method="post">
            <td>User name:</td>
            <td><input type="text" name="username"/></td>
            <td><input type="password" name="password"/></td>
            <td colspan="2">
                <button type="submit">Sign in</button>

  3. Visit the custom login page (note that there are too many redirects)

  start the project and access it directly


  you will find that there are too many redirections in the browser. What's the reason?

*  this is because we have configured loginPage("/mylogin.html") above, but this path is not allowed to be accessed. That is to say, when the path is redirected to / mylogin.html, the error will still be caused by the need to authenticate the redirected path / mylogin.html*

  4. Allow access to ant matchers ("/ mylogin. HTML"). Permitall ()

  only add. antMatchers("/mylogin.html").permitAll() to the configuration to allow this path


  visit again and our custom form will be displayed (ignore style...)

  at this time, we enter the user name, user password: console printing

    Using generated security password: 6bf253eb-c785-42b6-b147-b0fe2971586e

  discovery jumps to the / mylogin.html page again. This is because when we configure the loginPage("/mylogin.html"), the filter that processes form login no longer intercepts / login (the default is / login). The intercepted login request address becomes the same mylogin.html as loginPage

  at this time, if you change the action address to / mylogin.html, you can log in again

    <form action="/mylogin.html" method="post">

  5. Configure the custom login interface path loginprocessing URL

  because loginPage is configured above, the corresponding login interface path will become mylogin.html configured by loginPage. However, when we do not want to use this as the interface path, we can modify it through the following configuration

  configure the path to process the login request through the loginprocessing URL class


Remember to correspond to action

    <form action="/auth/login" method="post">

  now we have finished the configuration and precautions of spring security custom login page

6. summary

**This article mainly explains how to customize form login in spring security. It's not very simple, but there are some points to pay attention to. 1. Extend WebSecurityConfigurerAdapter2. Configure loginPage page path 3. Allow loginPage page path access 4. Configure login request path loginProcessingUrl**

Personal blog website https://www.askajohnny.com welcome to visit!

This article is based on the platform of blog one article multiple sending OpenWrite Release!

Published 18 original articles, won praise 0, visited 502
Private letter follow

Topics: Spring xml