Spring Security 4.1 configuration

默认的 name:
form:action="/login"
name="username"
name="password"

<form id="myform" method="post" style="text-align: center" action="/login">
    <div style="margin: 20px 0">

        <label id="uname">用户名</label>
        <input name="username" type="text" class="easyui-validatebox" 
               data-options="required:true, validType:'noNull',
               missingMessage:'用户名不能为空'">
        <br><br>
        <label id="pd">&nbsp;&nbsp;</label>
        <input name="password" type="password" class="easyui-validatebox" data-options="required:true,
               missingMessage:'密码不能为空'">
    </div>
    <div>
        <input id="loginButton" type="button"  class="easyui-linkbutton" style="width:60px;height:30px"
               value="登录" οnclick="submitForm()">
        <input id="resetButton" type="reset" class="easyui-linkbutton" style="width:60px;height:30px"
               value="重置">
    </div>
</form>


Configuration in springsecurity:

<http use-expressions="true">
    <headers>
        <frame-options policy="SAMEORIGIN"/>
    </headers>
    <csrf disabled="true"/>
    <intercept-url pattern="/login.html" access="permitAll"/>
    <intercept-url pattern="/content/updatePassword.html" access="permitAll"/>
    <intercept-url pattern="/resources/**" access="permitAll"/>
    <intercept-url pattern="/**" access="isAuthenticated()"/>
    <form-login login-page="/login.html" authentication-failure-url="/error.html?erroe=true"
                default-target-url="/index.html" always-use-default-target="true" />
    <logout/>
</http>

<authentication-manager>
    <authentication-provider>
        <jdbc-user-service data-source-ref="dataSource"
                           users-by-username-query="SELECT usercode, password, enabled FROM [user] WHERE usercode = ?"
                           authorities-by-username-query="SELECT usercode, rolecode FROM user_role WHERE usercode = ?"
                           role-prefix="ROLE_"/>
        <password-encoder hash="md5"/>
    </authentication-provider>
</authentication-manager>

Guess you like

Origin blog.csdn.net/Amos_liu/article/details/52043956