spring security redirect user by ROLE -

-

i want redirect user page based on role don't know how it. serched on doesn't work me. it's taking redirect role_master if user has role_user or other. tried in different ways can see in commented code none of them worked correctly.

the code is:

    @configuration     @enablewebsecurity     public class springsecurityconfig extends websecurityconfigureradapter {      @autowired     usersdetailsserviceimpl usersdetailsservice;      @autowired     public void configureglobal(authenticationmanagerbuilder auth) throws exception {         auth.inmemoryauthentication().withuser("stefan").password("1234").roles("admin");         auth.userdetailsservice(usersdetailsservice);     }      @override     public void configure(websecurity web) throws exception {         web.ignoring().antmatchers("/res/**");     }      //.csrf() optional, enabled default, if using websecurityconfigureradapter constructor     @override     protected void configure(httpsecurity http) throws exception {          http    .authorizerequests()                 .antmatchers("/master/**").access("hasrole('role_master')")                 .antmatchers("/admin/**").access("hasrole('role_admin')")                 .antmatchers("/user/**").access("hasrole('role_user')")                 .antmatchers("/viewer/**").access("hasrole('role_viewer')")                 .and()                 .formlogin().loginpage("/").failureurl("/?error")                 .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/master")                 .and()                 .logout().logouturl("/logout").logoutsuccessurl("/?logout")                 .and()                 .csrf();  //                .and() //                .authorizerequests() //                .antmatchers("/admin/**").access("hasrole('role_admin')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/admin") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf() // //                .and() //                .authorizerequests() //                .antmatchers("/user/**").access("hasrole('role_user')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/user") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf() // //                .and() //                .authorizerequests() //                .antmatchers("/viewer/**").access("hasrole('role_viewer')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/viewer") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf();   //        http.authorizerequests() //                .antmatchers("/admin/**").access("hasrole('role_admin')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/admin") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf();  //        http.authorizerequests() //                .antmatchers("/user/**").access("hasrole('role_user')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/user") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf();  //        http.authorizerequests() //                .antmatchers("/viewer/**").access("hasrole('role_viewer')") //                .and() //                .formlogin().loginpage("/").failureurl("/?error") //                .usernameparameter("username").passwordparameter("password").defaultsuccessurl("/viewer") //                .and() //                .logout().logouturl("/logout").logoutsuccessurl("/?logout") //                .and() //                .csrf();         //  http.formlogin().loginpage("/admin/login").failureurl("/admin/login?error").defaultsuccessurl("/main",true).usernameparameter("username").passwordparameter("password");      }  }

any ideea how can ?

implement own authenticationsuccesshandler check user role authentication object , send redirect suitable url

<bean id="authenticationsuccesshandler" class="..." /> <form-login authentication-success-handler-ref="authenticationsuccesshandler" ... />

full example roles


Comments

Post a Comment

Popular posts from this blog

c# - Better 64-bit byte array hash -

-
i need hash algorithm produces 64-bit hash code ( long ) fewer collisions string.gethashcode() , fast (no expensive calls cryptographic functions). here's implementation of fnv still shows 3% of collisions after testing 2 million random strings. need number way lower. void main() { const string chars = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz!#@$%^&*()_+}{\":?><,./;'[]0123456789\\"; const int n = 2000000; var random = new random(); var hashes = new hashset<long>(); int collisions = 0; for(int = 0; < n; i++) { var len = random.next(chars.length); var str = new char[len]; (int j = 0; j < len; j++) { str[j] = chars[random.next(chars.length)]; } var s = new string(str); if(!hashes.add(get64bithash( s ))) collisions++; } console.writeline("collision percentage after " + n + " random strings: " + ((doubl
Read more

webrtc - Which ICE candidate am I using and why? -

-
[questions in bold below] i have setup kurento media server 5.1.3 in datacenter behind firewall running os ubuntu 14.04. has 2 network cards: 222.222.222.222 (eth0 - private ip) 111.111.111.111 (eth1 - public ip) attached below sdp (setremotedescription) when browser connected kurento media server type: answer, sdp: v=0 o=- 5487318114793304426 0 in ip4 0.0.0.0 s=kurento media server c=in ip4 0.0.0.0 t=0 0 a=group:bundle audio video m=audio 59068 rtp/savpf 111 0 c=in ip4 111.111.111.111 a=rtpmap:111 opus/48000/2 a=rtpmap:0 pcmu/8000 a=sendrecv a=rtcp:59068 in ip4 111.111.111.111 a=rtcp-mux a=ssrc:669011897 cname:user39019747@host-6e83e4c2 a=extmap:3 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time a=mid:audio b=as:20 a=ice-ufrag:ymdk a=ice-pwd:lylifk5ueqzpwm91ddj37e a=fingerprint:sha-256 ff:0f:81:8c:41:4e:b4:b6:c6:d8:36:f3:d6:5f:09:fd:5f:af:13:b3:9d:fc:12:66:ac:f3:56:d6:5b:0a:73:5d a=candidate:1 1 udp 2013266431 111.111.111.111 55239 typ host a=candidate:2 1 udp
Read more

php - Zend Framework / Skeleton-Application / Composer install issue -

-
i trying create zend framework application using skeleton in netbeans. when run composer install, following error message: "c:\php\php.exe" "c:\composer\composer.phar" "--ansi" "--no-interaction" "update" "--dev" using deprecated option "dev". dev packages installed default now. loading composer repositories package information updating dependencies (including require-dev) requirements not resolved installable set of packages. problem 1 - package requires php >=5.5 php version (5.4.42) not satisfy requirement. problem 2 - installation request zendframework/zendframework 2.5.1 -> satisfiable zendframework/zendframework[2.5.1]. - zendframework/zendframework 2.5.1 requires php >=5.5 -> php version (5.4.42) not satisfy requirement. done. apparently, zend framework only needs php 5.3+ contradicts above. need use php 5.4. my composer.json following: { "name": "
Read more