Can't get Spring security "remember me" feature to work -


i'm new spring , java. trying set security remember me feature.

here security.xml , login.jsp files. doing wrong?

security.xml

<beans xmlns="http://www.springframework.org/schema/beans"        xmlns:security="http://www.springframework.org/schema/security"        xmlns:xsi="http://www.w3.org/2001/xmlschema-instance"        xsi:schemalocation="http://www.springframework.org/schema/beans           http://www.springframework.org/schema/beans/spring-beans-3.0.xsd           http://www.springframework.org/schema/security           http://www.springframework.org/schema/security/spring-security-4.0.xsd">      <security:authentication-manager>     <security:authentication-provider>         <security:jdbc-user-service data-source-ref="datasource"/>         <security:password-encoder ref="passwordencoder"/>     </security:authentication-provider> </security:authentication-manager>      <security:http use-expressions="true">         <security:intercept-url pattern="/" access="permitall"/>         <security:intercept-url pattern="/createplayer" access="isauthenticated()"/>         <security:intercept-url pattern="/players" access="hasrole('role_admin')"/>         <security:intercept-url pattern="/createaccount" access="permitall"/>         <security:intercept-url pattern="/login" access="permitall"/>         <security:intercept-url pattern="/logout" access="permitall"/>         <security:intercept-url pattern="/welcome" access="hasrole('role_admin')"/>         <security:intercept-url pattern="/**" access="denyall"/>          <security:form-login login-page="/login" authentication-failure-url="/login?error=true"/>          <security:remember-me key="myappkey" remember-me-parameter="remember-me"                               remember-me-cookie="remember-me"                               token-validity-seconds="604800"                               data-source-ref="datasource"/>     </security:http>      <bean id="passwordencoder" class="org.springframework.security.crypto.bcrypt.bcryptpasswordencoder">     </bean>  </beans>

login.jsp

<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%> <html> <body>     <h1>login</h1>     <c:if test="${param.error != null}">     login failed. check if username or password correct!     </c:if>      <form action = "/login", method="post">     <input type="hidden" name="${_csrf.parametername}" value="${_csrf.token}"/>      name <br>     <input name="username"/> <br>     password<br>     <input type="password" name="password"/> <br>      remember me <br>     <input type="checkbox" name="remember-me">      <br><br>     <input type="submit"> <br><br>  </form>      <h2>${msg}</h2>     <br>     <a href = "http://localhost:9999/createaccount"> create account </a> <br> </body> </html>

p.s. tried adding

<session-config>   <session-timeout>1</session-timeout> </session-config>

to web.xml check if "remember me" works, instead "remembering me" logs out in 1 minute.

add id jdbc-user-service

<security:jdbc-user-service data-source-ref="datasource" id="jdbcuserservice/>

and refer service remember-me it's id this:

<security:remember-me key="myappkey"                       user-service-ref="jdbcuserservice"/>

Comments

Post a Comment

Popular posts from this blog

How to understand 2 main() functions after using uftrace to profile the C++ program? -

i trying uftrace profile following simple c++ program: #include <iostream> class { public: a() {std::cout << "a created" << std::endl;} ~a() {std::cout << "a destroyed" << std::endl;} }; int main() { a; return 0; } the profile result this: # uftrace a.out created destroyed # duration tid function 2.026 [ 4828] | __cxa_atexit(); [ 4828] | main() { [ 4828] | __static_initialization_and_destruction_0() { 89.397 [ 4828] | std::ios_base::init::init(); 0.768 [ 4828] | __cxa_atexit(); 93.029 [ 4828] | } /* __static_initialization_and_destruction_0 */ 94.425 [ 4828] | } /* main */ [ 4828] | main() { [ 4828] | a::a() { 11.104 [ 4828] | std::operator <<(); 10.825 [ 4828] | std::basic_ostream::operator <<(); 24.514 [ 4828] | } /* a::a */ [ 4828] | a::~a() { 0.978 [ 4828] | ...
Read more

c# - Update a combobox from a presenter (MVP) -

i using mvp in project, new in mvp. have 2 comboboxes. when select option in combobox, combobox should filled new data. this action in presenter. view 'view1' in presenter, , introduced combobox1 , combobox2 properties in 'view1', because need 'datasource', 'displaymember', 'valuemember' , 'refresh()' in method below. but, when using pattern, enough send property like public string combobox2 { { return combobox1.selectedvalue.tosstring(); } } into presenter not whole combobox. how can solve problem? public void onselectedindexchangedcombobox1() { if (view1.combobox1.selectedindex == -1) { return; } datatable dt = tools.getdatatable("a path"); var query = (from o in dt.asenumerable() o.field<string>("afield") == farmerview.combobox1.selectedvalue.tostring() orderby o.field<string>("anotherfield") select...
Read more

How to put a lock and transaction on table using spring 4 or above using jdbcTemplate and annotations like @Transactional? -

i trying put lock on table while writing on table , if happened in between roll-back . trying convert below code lock table test_g1 read; lock table test_g write; -- begin; start transaction; insert test_g1 values(143); insert test_g values(145); select * test_g1; select * test_g; rollback; select * test_g; unlock tables; how convert above code @transactional spring jdbctemplate code? @transactional(rollbackfor={dataaccessexception.class}) public void test(){ jdbctemplate.execute("insert test1 (id, nam) values (4, 'a')"); throw new dataaccessexception("error") { }; } here trying throw error, insert statement should rollback it's not happening . thanks edit-1 attaching code , doing in jdbcdaoimpl.java , mentioned problem comment above test() . app.java package com.cgiri.javabrains.spring4; import org.springframework.beans.factory.annotation.autowired; import org.springframework.context.applic...
Read more