java - What is the use case for overriding default login-processing-url in spring security -


here sample config spring security form login

<http auto-config="true" use-expressions="false">       <form-login login-processing-url="/static/j_spring_security_check"                   login-page="/login"                   authentication-failure-url="/login?login_error=t"/>   </http> 

now if dont specify explicit login-processing-url spring assumes "/j_spring_security_check". not find type of functional difference between default , overridden 1 , found spring handles change seamlessly. tried google understand when should override it. none of answer satisfied me.

so when , why should override default login-processing-url? , importantly there usecase when "must" override default?

thanks

if want hide fact using spring security, should override login-processing-url "forms/login", username , password form parameters. hide framework using secure site.

the <form-login> tag short hand configuring usernamepasswordauthenticationfilter. filter invoked url specified in login-processing-url , use value set username-parameter , password-parameter username , password request.


Comments