每次登录到我的spring启动项目时，它都会重定向到错误页面

Question

    i am trying to login in my spring boot project .it logged in by getting data from database but every time it first redirect to the error page and i got this error..
    timestamp   "2020-01-16T18:08:34.995+0000"
        status  999
        error   "None"
        message "No message available"

除了首先重定向到错误页面外，所有操作都正常工作。Hibernate：选择学生0。id为id1\u 1\u，学生0\u。以email2\u 1\u的形式发送电子邮件，学生0\u。姓名为姓名3\u 1\u，学生0\u。来自student student0的密码为password4\u 1\u其中student0\u。电子邮件=？Hibernate：选择角色0。学生id为学生1、2、0、角色0。角色id为角色id 2、角色2、角色0、角色1。id为id1\u 0\u 1\u，角色1\u。从角色0上的学生角色0内部加入角色1命名为名称2\u 0\u 1。角色id=角色1。角色0的id。学生id=？实体类

包装com.milton.tsi.model；

import java.util.List;

import javax.persistence.CascadeType;
import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.GeneratedValue;
import javax.persistence.GenerationType;
import javax.persistence.Id;
import javax.persistence.JoinColumn;
import javax.persistence.JoinTable;
import javax.persistence.ManyToMany;
import javax.validation.constraints.Email;
import javax.validation.constraints.NotEmpty;

@Entity
public class Student {

    @Id
    @GeneratedValue(strategy = GenerationType.AUTO)
    private long id;
    @Column
    @NotEmpty
    private String name;
    @Column
    @Email(message = "Enter a valid email")
    @NotEmpty
    private String email;
    @Column
    @NotEmpty(message = "Enter password please")
    private String password;

    @ManyToMany(cascade = CascadeType.ALL)
    @JoinTable(name = "student_role",joinColumns = {@JoinColumn(referencedColumnName = "id",name = "student_id")},
    inverseJoinColumns = {@JoinColumn(referencedColumnName = "id",name = "role_id")})
    private List<Role>roles;

    public Student(long id, @NotEmpty String name, @Email @NotEmpty String email, @NotEmpty String password,
            List<Role> roles) {
        super();
        this.id = id;
        this.name = name;
        this.email = email;
        this.password = password;
        this.roles = roles;
    }

    public Student() {
        super();
    }

    public long getId() {
        return id;
    }

    public void setId(long id) {
        this.id = id;
    }

    public String getName() {
        return name;
    }

    public void setName(String name) {
        this.name = name;
    }

    public String getEmail() {
        return email;
    }

    public void setEmail(String email) {
        this.email = email;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public List<Role> getRoles() {
        return roles;
    }

    public void setRoles(List<Role> roles) {
        this.roles = roles;
    }


}
package com.milton.tsi.model;

import java.util.List;

import javax.persistence.Entity;
import javax.persistence.Id;
import javax.persistence.ManyToMany;

@Entity
public class Role {

    @Id
    private long id;
    private String name;
    @ManyToMany(mappedBy = "roles")
    private List<Student>students;


    public Role() {
        super();
    }
    public Role(long id, String name, List<Student> students) {
        super();
        this.id = id;
        this.name = name;
        this.students = students;
    }
    public long getId() {
        return id;
    }
    public void setId(long id) {
        this.id = id;
    }
    public String getName() {
        return name;
    }
    public void setName(String name) {
        this.name = name;
    }
    public List<Student> getStudents() {
        return students;
    }
    public void setStudents(List<Student> students) {
        this.students = students;
    }


}

存储库

package com.milton.tsi.repository;

import java.util.Optional;

import org.springframework.data.jpa.repository.JpaRepository;
import org.springframework.stereotype.Repository;

import com.milton.tsi.model.Student;

@Repository
public interface StudentRepository extends JpaRepository<Student, Long>{
    Optional<Student>findByEmail(String email);

}

服务等级

package com.milton.tsi.service;

import java.util.Collection;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.AuthorityUtils;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;

import com.milton.tsi.model.Student;
import com.milton.tsi.repository.StudentRepository;

@Service
@Transactional
public class StudentService implements UserDetailsService{

    @Autowired
    private StudentRepository studentRepository;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        Student student = studentRepository.findByEmail(username).orElseThrow(()->new UsernameNotFoundException(username+" not found"));
        return new User(student.getEmail(),student.getPassword(),getAuthorities(student));
    }

    private Collection<? extends GrantedAuthority> getAuthorities(Student student) {
        String[]roles= student.getRoles().stream().map((role)->role.getName()).toArray(String[]::new);
        Collection<GrantedAuthority>authorities =AuthorityUtils.createAuthorityList(roles);
        return authorities;
    }


}

配置

package com.milton.tsi.configuration;

import javax.sql.DataSource;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.builders.WebSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;

@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter{
    @Autowired
    private DataSource dataSource;
    @Autowired
    UserDetailsService studentService;

    @Bean
    public PasswordEncoder passwordEncoder() {
        BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();
        return  encoder;
    }



        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            //auth.jdbcAuthentication().dataSource(dataSource);
            auth.userDetailsService(studentService)
            .passwordEncoder(passwordEncoder());
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http.headers().frameOptions().sameOrigin()
            .and()
            .authorizeRequests()
            .antMatchers("/","/about").permitAll()
            .antMatchers("/static/**","/resources/**","/css/**","/webjars/**").permitAll()
            .antMatchers("/admin/**").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin()
            .loginPage("/login")
            //.defaultSuccessUrl("/")
            .failureUrl("/error/403.html").permitAll()
            .and()
            .logout()
            .logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
            .logoutSuccessUrl("/?logout")

            .and()
            .exceptionHandling();
        }


        @Override
        public void configure(WebSecurity web) throws Exception {
            web.ignoring()
            .antMatchers("/static/**","/resources/**","/css/**","/webjars/**");
        }
    }


package com.milton.tsi.configuration;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
import org.thymeleaf.extras.springsecurity4.dialect.SpringSecurityDialect;

@Configuration
public class WebmvcConfig  implements WebMvcConfigurer{

    @Override
    public void addViewControllers(ViewControllerRegistry registry) {
     registry.addViewController("/").setViewName("views/home");
     registry.addViewController("/login").setViewName("/login");
     registry.addViewController("/admin/home").setViewName("adminhome");
    registry.addViewController("/about").setViewName("/views/about");
    }

    @Bean
    public SpringSecurityDialect springSecurityDialect()
    {
        return new SpringSecurityDialect();
    }
}

控制器

package com.milton.tsi.controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

@Controller
public class AdminController {

@RequestMapping("/admin/home")
public String adminHome() {
    return "adminhome";
}
}
package com.milton.tsi.controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

@Controller
public class HomeController {

    @RequestMapping("/")
    public String home() {
        return "home";
    }

    @RequestMapping("/about")
    public String about() {
        return "views/about";
    }

}
package com.milton.tsi.controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.servlet.ModelAndView;

@Controller
public class StudentController {

@RequestMapping("/user")
public String studentHome() {
    return "studenthome";
}
}

登录表单

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org"
    xmlns:layout="http://www.ultraq.net.nz/thymeleaf/layout"
    layout:decorate="~{layout}">
<head>
<meta charset="ISO-8859-1">
<style type="text/css">

fieldset {
    width: 450px;
    border: 5px solid #D82128;
    border-radius: 5px;
    margin-top: 150px;
    margin-bottom: 20px;
    text-align: right;
    padding: 50px;
    padding-right: 80px;
    margin-left: 450px;
}

legend {
    width: 250px;
    border: 1px solid #D82128;
    border-radius: 5px;
    background-color: #D82128;
    text-transform: uppercase;
    text-align: center;
    color: white;
}

</style>
</head>
<body>
    <div layout:fragment="content">

        <fieldset class="card" style="border-color: #D82128">
            <legend>Login</legend>
            <form  th:action="@{/login}" method="post">
            <div th:if="${param.error}"><h3>Invalid email or password</h3></div>
                <div>
                    <input type="email" name="username" placeholder="enter email">
                </div>
                <div>
                    <input type="password" name="password" placeholder="enter password">
                </div>
                <div>
                    <button class="btn btn-warning">Login</button>
                </div>

            </form>
        </fieldset>

    </div>
</body>
</html>

Answer 1

http.csrf().disable().formLogin().permitAll().and().authorizeRequests().antMatchers("/login").permitAll().and().authorizeRequests().anyRequest().authenticated();