java - What is the use case for overriding default login-processing-url in spring security -
here sample config spring security form login
<http auto-config="true" use-expressions="false"> <form-login login-processing-url="/static/j_spring_security_check" login-page="/login" authentication-failure-url="/login?login_error=t"/> </http> now if dont specify explicit login-processing-url spring assumes "/j_spring_security_check". not find type of functional difference between default , overridden 1 , found spring handles change seamlessly. tried google understand when should override it. none of answer satisfied me.
so when , why should override default login-processing-url? , importantly there usecase when "must" override default?
thanks
if want hide fact using spring security, should override login-processing-url "forms/login", username , password form parameters. hide framework using secure site.
the <form-login> tag short hand configuring usernamepasswordauthenticationfilter. filter invoked url specified in login-processing-url , use value set username-parameter , password-parameter username , password request.
Comments
Post a Comment