Shiro nicht nach gescheiterten Versuchen, loginUrl Umleitung in

Question

mit Spring-Boot einzuloggen ich die folgenden Filter an Konfiguration

@Bean(name = "shiroFilter") 
public ShiroFilterFactoryBean shiroFilter() { 
    ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean(); 
    Map<String, String> filterChainDefinitionMapping = new HashMap<>(); 

    /* 
    * URL path expressions are evaluated against an incoming request in the order they are defined and the FIRST MATCH WINS. For example, let's asume that there are the following chain definitions: 
     /account/** = ssl, authc 
     /account/signup = anon 
     If an incoming request is intended to reach /account/signup/index.html (accessible by all 'anon'ymous users), it will never be handled!. The reason is that the /account/** pattern matched the incoming request first and 'short-circuited' all remaining definitions. 
     Always remember to define your filter chains based on a FIRST MATCH WINS policy! 
    * */ 

    filterChainDefinitionMapping.put("/login.html", "authc"); 
    filterChainDefinitionMapping.put("/logout", "logout"); 
    filterChainDefinitionMapping.put("/css/**", "anon"); 
    filterChainDefinitionMapping.put("/register/**", "anon"); 
    filterChainDefinitionMapping.put("/**", "authc"); 
    shiroFilter.setFilterChainDefinitionMap(filterChainDefinitionMapping); 
    shiroFilter.setSecurityManager(securityManager()); 

    shiroFilter.setLoginUrl("/login.html"); 
    shiroFilter.setSuccessUrl("/"); 
    shiroFilter.setUnauthorizedUrl("/unauthorized.html"); 

    Map<String, Filter> filters = new HashMap<>(); 

    filters.put("anon", new AnonymousFilter()); 

    filters.put("authc", new FormAuthenticationFilter()); 

    LogoutFilter logoutFilter = new LogoutFilter(); 
    logoutFilter.setRedirectUrl("/login.html?logout"); 
    filters.put("logout", logoutFilter); 

    filters.put("roles", new RolesAuthorizationFilter()); 
    filters.put("user", new UserFilter()); 

    shiroFilter.setFilters(filters); 

    return shiroFilter; 
} 

Jedes Mal, wenn ich versuche, mit falschen Anmeldeinformationen anmelden, um die Umleitung nie passiert. Ich bekomme das "shiroLoginFailure" -Attribut mit der UnknownUserException.

(Logging mit den richtigen Anmeldeinformationen in funktioniert gut)

Irgendwelche Ideen?

Answer 1

Mariosk89, wie lösen Sie die /login.html?

Es könnte brauchen werden, um dies zu lösen umleiten wie:

@RequestMapping("/login") 
public String login(String username, String password) { 
    Subject currentUser = SecurityUtils.getSubject(); 
    if (StringUtils.hasText(username) && StringUtils.hasText(password)) { 
     try { 
      currentUser.login(new UsernamePasswordToken(username, password)); 
     } catch (Exception e) { 
      logger.error(e.getLocalizedMessage(), e); 
      return "login"; 
     } 
     return "redirect:index"; 
    } else { 
     return "login"; 
    } 
} 

Referenz: https://github.com/lenicliu/examples/tree/master/examples-spring-boot/examples-spring-boot-shiro

Weitere Ausnahme Lösung finden http://shiro.apache.org/10-minute-tutorial.html

try { 
    currentUser.login(token); 
    //if no exception, that's it, we're done! 
} catch (UnknownAccountException uae) { 
    //username wasn't in the system, show them an error message? 
} catch (IncorrectCredentialsException ice) { 
    //password didn't match, try again? 
} catch (LockedAccountException lae) { 
    //account for that username is locked - can't login. Show them a message? 
} 
    ... more types exceptions to check if you want ... 
} catch (AuthenticationException ae) { 
    //unexpected condition - error? 
}