我有以下弹簧安全代码,但它不起作用.当我打开登录页面并输入用户名/密码admin @myproject.com / secret时,将显示以下错误消息.输入用户名/密码后,添加到地址?error = 1,即使我手动删除它并刷新页面消息也不行.控制台中没有显示任何内容.
Your login attempt was not successful due to Bad credentials.
弹簧security.xml文件
<beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd"> <beans:import resource='login-service.xml' /> <http auto-config="true" access-denied-page="/notFound.jsp" use-expressions="true"> <intercept-url pattern="/" access="permitAll" /> <intercept-url pattern="/member**" access="hasRole('ROLE_MEMBER')" /> <form-login login-page="/signin" default-target-url="/index" authentication-failure-url="/signin?error=1" /> <logout logout-success-url="/login?logout" /> <csrf /> </http> <authentication-manager> <authentication-provider> <user-service> <user name="admin@myproject.com" password="secret" authorities="ROLE_ADMIN"/> <user name="user@yahoo.com" password="secret" authorities="ROLE_USER"/> </user-service> </authentication-provider> </authentication-manager> </beans:beans>
该表单包含以下代码,即使在提交表单之前,SPRING_SECURITY_LAST_EXCEPTION似乎也不为空.
<c:if test="${not empty SPRING_SECURITY_LAST_EXCEPTION}"> <font color="red"> Your login attempt was not successful due to <br /> <br /> <c:out value="${SPRING_SECURITY_LAST_EXCEPTION.message}" />. </font> </c:if> <form id="form-login" role="form" method="post" action="<c:url value='/j_spring_security_check' />" class="relative form form-default"> <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}" />
Your login attempt was not successful due to Authentication method not supported: GET.