봄 보안 사용자 지정 로그인 리디렉션 충돌

Question

스프링 보안을 사용하여 사용자 지정 로그인 폼을 만들었지 만 일부는 완벽하게 작동하지만 로그인 URL은 CSS 또는 이미지 또는 js 폴더로 리디렉션되는 경우가 있습니다. 내가 잘 새로 고친 후 잘 작동, 내 봄 보안 문제가 뭔지 몰라.

사용자 정의 로그인 페이지

<form:form class="form-vertical login-form" action="j_spring_security_check" method="post"> 
     <h3 class="form-title">Login to your account</h3> 
     <input type="text" autocomplete="off" placeholder="Username" name="j_username"/> 
     <input type="password" autocomplete="off" placeholder="Password" name="j_password"/> 

     <font color="red"> 
      <span>${sessionScope["SPRING_SECURITY_LAST_EXCEPTION"].message}</span> 
     </font> 

    </form:form> 

보안 컨텍스트 XML

<beans:beans xmlns="http://www.springframework.org/schema/security" 
    xmlns:beans="http://www.springframework.org/schema/beans" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:schemaLocation="http://www.springframework.org/schema/beans 
        http://www.springframework.org/schema/beans/spring-beans-3.0.xsd 
        http://www.springframework.org/schema/security 
        http://www.springframework.org/schema/security/spring-security-3.1.xsd"> 

    <!-- We will be defining all security related configurations in this file --> 
    <http pattern="/" security="none"/> 
    <http use-expressions="true"> 
     <intercept-url pattern="/**" access="isAuthenticated()"/> <!-- this means all URL in this app will be checked if user is authenticated --> 
     <!-- We will just use the built-in form login page in Spring --> 
     <form-login login-page="/" login-processing-url="/j_spring_security_check" default-target-url="/home" authentication-failure-url="/"/> 
     <logout logout-url="/logout" logout-success-url="/"/> <!-- the logout url we will use in JSP --> 
    </http> 

    <authentication-manager> 
     <authentication-provider> 
      <!-- Normally, in this part, you will declare the source of your users 
       But for simplicity, we will hard-code the users. This is very useful while testing setup --> 
      <user-service> 
       <user name="admin" password="admin" authorities="Admin, User"/> 
       <user name="user" password="user" authorities="User"/> 
      </user-service> 
     </authentication-provider> 
    </authentication-manager> 

</beans:beans> 

로그인 컨트롤러

@RequestMapping("/") 
public String loginForm() 
{ 
    return "login"; 
} 

웹 XML

<?xml version="1.0" encoding="UTF-8"?> 
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5"> 
    <display-name>YESKAY</display-name> 

    <!-- Spring security --> 
    <context-param> 
     <param-name>contextConfigLocation</param-name> 
     <param-value> 
      /WEB-INF/spring-servlet.xml 
      /WEB-INF/security-context.xml 
     </param-value> 
    </context-param> 
    <listener> 
     <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> 
    </listener> 
    <listener> 
     <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class> 
    </listener> 

    <!-- Define a filter to enable Spring Security, be sure to use the suggested name 'springSecurityFilterChain' --> 
    <filter> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> 
    </filter> 
    <filter-mapping> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <url-pattern>/*</url-pattern> 
    </filter-mapping> 


    <servlet> 
     <servlet-name>spring</servlet-name> 
     <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 
     <load-on-startup>1</load-on-startup> 
    </servlet> 
    <servlet-mapping> 
     <servlet-name>spring</servlet-name> 
     <url-pattern>/</url-pattern> 
    </servlet-mapping> 


<!-- <welcome-file-list> 
    <welcome-file>index.html</welcome-file> 
    <welcome-file>index.htm</welcome-file> 
    <welcome-file>index.jsp</welcome-file> 
    <welcome-file>default.html</welcome-file> 
    <welcome-file>default.htm</welcome-file> 
    <welcome-file>default.jsp</welcome-file> 
    </welcome-file-list>--> 
</web-app> 

성공적인 로그인 URL 일부 시간은 URL이나 다른

http://localhost:8080/PROJECT/resources/assets/plugins/font-awesome/font/fontawesome-webfont.ttf?v=3.2.0 

뭔가

Answer 1

당신은 당신의 정적 리소스 경로에 대한 요청을 생략 할 필요가 내 폴더 구조 아래로 리디렉션

http://localhost:8080/PROJECT/home 

Spring Security의 필터에서 가져온 것입니다. 그렇지 않으면 실제로 요청한 것이 무엇인지에 대해 혼란 스러울 수 있습니다. ogin (브라우저는 이미지와 같은 페이지 리소스에 대한 요청도 보내기 때문에).

을해야 구성의 상단에

<http pattern="/resources/**" security="none"/> 

같은 것을 추가.