Spring Security 302 redirection

Question

I have a problem with Spring Security, when i access to my registration page and i click on the register button, it redirects me automatically to the login page. In the console Chrome a status code 302 is indicated. I tried several things but without success...

here is my security config:

@Configuration
@EnableWebSecurity
public class SecurityConfig  extends WebSecurityConfigurerAdapter {
    @Autowired
    @Qualifier("customUserDetailsService")
    private UserDetailsService customUserDetailsService;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .antMatchers("/login", "/registration").permitAll()

            .anyRequest()
            .authenticated()
            .and().formLogin()

            .loginPage("/login")
            .usernameParameter("email")
            .defaultSuccessUrl("/consultAccount").permitAll()
            .and()// logout
            .logout().deleteCookies("JSESSIONID")
            .logoutRequestMatcher(new AntPathRequestMatcher("/logout"));
    }

    @Override
    protected void configure(AuthenticationManagerBuilder authManagerBuilder) throws Exception {
        authManagerBuilder.userDetailsService(customUserDetailsService).passwordEncoder(bCryptPasswordEncoder());
    }

    @Bean
    public BCryptPasswordEncoder bCryptPasswordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }

CustomUserDetailsService.java

@Service("customUserDetailsService")
public class CustomUserDetailsService implements UserDetailsService {
    @Autowired
    private UserRepository userRepository;

    @Override
    @Transactional(readOnly = true)
    public UserDetails loadUserByUsername(String email) throws UsernameNotFoundException {
        if (email.trim().isEmpty()) {
            throw new UsernameNotFoundException("email is empty");
        }

        User user = userRepository.findByEmail(email);

        if (user == null) {
            throw new UsernameNotFoundException("User " + email + " not found");
        }

        Set grantedAuthorities = new HashSet<>();
        grantedAuthorities.add(new SimpleGrantedAuthority("USER"));
        grantedAuthorities.add(new SimpleGrantedAuthority("ADMIN"));

        return new org.springframework.security.core.userdetails.User(
                user.getEmail(), user.getPassword(), grantedAuthorities);
    }
}

my controller:

@Controller
public class BankController {
    @Autowired
    private BankService bankService;

    @Autowired
    private UserService userService;

    @Autowired
    private SecurityService securityService;

    @RequestMapping(value = "/login")
    public String login() {
        return "login";
    }

    @RequestMapping("/account")
    public String index() {
        return "account";
    }

    @RequestMapping("/registration")
    public String registration(Model model) {
        User user = new User();
        model.addAttribute("user", user);
        return "registration";
    }

    @RequestMapping("/welcome")
    public String welcome() {
        return "welcome";
    }

    @RequestMapping(value = "/register", method = RequestMethod.POST)
    public String registerUser(@Valid User user,
                               BindingResult bindingResult,
                               RedirectAttributes RedirectAttributes) {
        String originalPassword = user.getPassword();

        if (bindingResult.hasErrors()) return "registration";
        try {
            userService.saveUser(user);
            securityService.autoLogin(user.getEmail(), originalPassword);

        } catch (Exception e) {
            RedirectAttributes.addFlashAttribute("exception", e.getMessage());
            return "redirect:/registration";
        }
        return "redirect:/welcome";
    }

login.html








Authentification


 





    
    


        
            Pay My Buddy

            

             
                Username or password is invalid
            

             
 
             


            
            Create an account

registration.html



  
      
      Create an account
    

 

  

  

    

            
                Registration Form

thanks for your help

Eleftheria Stein-Kousathana · Accepted Answer

When a user registers, you are making a POST request to "/register".

However, "/register" requires a user to be authenticated.

You can add

.antMatchers("/register").permitAll()

to your security configuration in order to allow unauthenticated users to register.

Spring Security 302 redirection

Answers (1)

Related Questions