Reputation: 35864
We have some shopping cart pages which work with both guest and user paths. We want to allow a user to login at any time during the process but don't really want to create yet another login page. I'd prefer that we can simply redirect the user to the existing login and tell Spring Security what URL to come back to.
I know this happens automatically when sessions timeout and/or protected pages are requested without a session, but is there a way I can give the URL to Spring Security myself?
Upvotes: 2
Views: 523
Reputation: 22752
If you just need a simple return-to URL to retrieve the cart, then you are probably best to implement that yourself in an AuthenticationSuccessHandler. You can look at the source for SimpleUrlAuthenticationSuccessHandler
and its parent for inspiration.
The default login mechanism uses the RequestCache
and a SavedRequest
, but that is intended to actually replay a request which would not otherwise be authorised. That's probably overkill in your case.
Upvotes: 2