Custom login/register form with Spring - fail to redirect user to profile page - spring

Question

I have been working with login and register form with spring and I am stuck a little bit. My login and register form are custom and on same page.
loginRegister.html
<form role="form" action="/app/register" method="post" />
<input type="text" name="firstname" placeholder="First name..." />
<input type="text" name="lastname" placeholder="Last name..." />
<input type="text" name="username" placeholder="Username" />
<input type="text" name="email" placeholder="Email #" />
<input type="text" name="password" placeholder="Password" />
<button type="submit" class="btn">Sign me up!</button>
</form>
<form role="form" action="/app/login" method="post" >
<input type="text" name="username" placeholder="Username..." />
<input type="password" name="password" placeholder="Password..."/>
<input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>
<button type="submit" class="btn">Sign in!</button>
</form>
HomeController:
#Controller
#Transactional
#RequestMapping({"/", "/homepage"})
public class HomeController {
#RequestMapping(path = "/login", method = RequestMethod.GET)
public String showLoginRegister() {
return "login";
}
#RequestMapping(path="/register", method=RequestMethod.POST)
public String register(User user){
userRepository.save(user);
return "redirect:/users/" + user.getUsername();
}
#RequestMapping(path="/login", method=RequestMethod.POST)
public String login (User user)
{
return "redirect:/users/" + user.getUsername();
}
UserController:
#Controller
#RequestMapping("/users")
public class UserController {
private UserRepository userRepository;
#Autowired
public UserController(UserRepository userRepository){
this.userRepository=userRepository;
}
#RequestMapping(value="/{username}", method = RequestMethod.GET)
public String showUserProfile(#PathVariable String username, Model model){
User user = userRepository.findByUsername(username);
model.addAttribute(user);
return "userProfile";
}
}
When my user registers it should be redirected to profile page, same is after he/she log's in.
My classes for Spring security are:
SecurityWebApplicationInitializer class
public class SecurityWebApplicationInitializer extends AbstractSecurityWebApplicationInitializer{
}
SecurityConfig class
#Configuration
#EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter
{
#Autowired
private DataSource dataSource;
#Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
auth
.jdbcAuthentication()
.dataSource(dataSource);
//.passwordEncoder(bcryptEncoder);
}
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers("/login").permitAll()
.antMatchers("/admin").hasRole("ADMIN")
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login")
.and()
.httpBasic();
http.csrf().disable();
}
}
My problem is that user is never redirected from loginRegister page to profile page.

Answer 1

Update your SecurityConfig file with code:
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers("/login").permitAll()
.antMatchers("/admin").hasRole("ROLE_ADMIN")
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login")
.and()
.httpBasic();
http.csrf().disable();
}