java如何使用Spring Security更改登录的弹出行为？

5 月 Questions & Answers 1424

在我的应用程序中，我使用安全性。如下所示的xml：

<security:http pattern="/services/upload" security="none" />
<security:http auto-config='true' create-session="stateless" entry-point-ref="digestEntryPoint">
    <security:intercept-url pattern="/admin.html"
        access="ROLE_ADMIN" />
    <security:intercept-url pattern="/services/projects/**"
        access="ROLE_ADMIN" />
    <security:http-basic />
    <security:custom-filter ref="digestFilter" after="BASIC_AUTH_FILTER" />
</security:http>

<bean id="digestFilter"
    class="org.springframework.security.web.authentication.www.DigestAuthenticationFilter">
    <property name="userDetailsService" ref="userService" />
    <property name="authenticationEntryPoint" ref="digestEntryPoint" />
</bean>

<bean id="digestEntryPoint"
    class="org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint">
    <property name="realmName"
        value="Admin Tab via Digest Authentication" />
    <property name="key" value="acegi" />
</bean>

<security:authentication-manager>
    <security:authentication-provider>
        <security:user-service id="userService">
            <security:user name="xx" password="xx"
                authorities="ROLE_ADMIN" />
        </security:user-service>
    </security:authentication-provider>
</security:authentication-manager>

当我点击索引上的管理选项卡时。html浏览器弹出其（不受我控制）表单，输入登录名和密码。当我点击这个按钮上的取消，我得到401错误页面。当我输入错误凭据时，弹出窗口将重置，并且不会通知我有关凭据的信息。我想要达到的是只停留在索引上。当用户单击“取消”时显示html，并在用户输入错误凭据时显示一些信息。我尝试了许多解决方案，但都没有找到任何解决方案。有可能吗

Python中文网

有 Java 编程相关的问题?

java如何使用Spring Security更改登录的弹出行为？

共 (1) 个答案

# 1 楼答案