使用数据库的Spring Security认证

Question

<http auto-config="true"  use-expressions="true">
        <csrf disabled="true"/>
        <intercept-url pattern="/login" access="permitAll" />
        <intercept-url pattern="/logout" access="permitAll" />
        <intercept-url pattern="/accessdenied" access="permitAll" />
        <intercept-url pattern="/**" access="hasRole('ROLE_ADMIN')" />
        <form-login login-page="/login" default-target-url="/AddUser.html" authentication-failure-url="/accessdenied" />
        <logout logout-url="/j_spring_security_logout" logout-success-url="/logout"/>
    </http>

    <authentication-manager alias="authenticationManager">
        <authentication-provider>
            <jdbc-user-service data-source-ref="dataSource"
               users-by-username-query="select username,password,enabled from user_authentication where username=?"
               authorities-by-username-query="select u1.username, u2.role from user_authentication u1, user_authorization u2 where u1.user_id = u2.user_id and u1.username =?" />
        </authentication-provider>
    </authentication-manager>

Answer 1

在表单-登录中：

<form-login login-page="/login" 
    default-target-url="/AddUser.html" 
    authentication-failure-url="/accessdenied" />

您没有任何参数，例如：

username-parameter="username"
password-parameter="password"

所以只需添加它们：

<form-login login-page="/login" 
        default-target-url="/AddUser.html" 
        username-parameter="username"
        password-parameter="password"
        authentication-failure-url="/accessdenied" />