spring security 2.0.7 和 spring 2.5 的登录表单问题

您好，我正在尝试在我的应用程序上放置一个登录页面。 我的login.jsp是

    <form name='f' action="<c:url value='j_spring_security_check' />"
        method='POST'>

        <table>
            <tr>
                <td>User:</td>
                <td><input type='text' name='j_username' value=''>
                </td>
            </tr>
            <tr>
                <td>Password:</td>
                <td><input type='password' name='j_password' />
                </td>
            </tr>
            <tr>
                <td colspan='2'><input name="submit" type="submit"
                    value="submit" />
                </td>
            </tr>
            <tr>
                <td colspan='2'><input name="reset" type="reset" />
                </td>
            </tr>
        </table>

    </form>
</body>
</html>

登录控制器

@控制器 公共类登录控制器{

 @RequestMapping("/user/login.do")
    public ModelAndView handleLoginForm(HttpServletRequest request) {
        String errParam = request.getParameter("error");
        ModelAndView mv = new ModelAndView("login");
        if(errParam != null) {
            mv.addObject("error", "Benutzer oder Kennwort unzulässig");
        }
        return mv;
    }

}

弹簧安全XML

    <http auto-config="true">
        <intercept-url pattern="/login"
            access="ROLE_USER" />
        <intercept-url pattern="/j_spring_security_check"
            access="ROLE_USER" />
        <form-login login-page="/login"
            login-processing-url="/j_spring_security_check" default-target-url="/userPage.do"
            authentication-failure-url="/login?error=1" />
        <logout logout-success-url="/login"
            logout-url="/logout" />
    <!--    <intercept-url pattern="/user/userPage.do" access="ROLE_USER" />
        <form-login login-page="/user/login.do" default-target-url="/user/userPage.do"
            authentication-failure-url="/loginfailed" />
        <logout logout-success-url="/logout" />  -->
    </http>


   <authentication-provider>
                <user-service id="userDetailsService">
                        <user name="admin" password="admin" authorities="ROLE_USER, ROLE_ADMIN" />
                        <user name="username" password="password" authorities="ROLE_USER" />
                        <user name="test" password="test" authorities="ROLE_USER" />
                </user-service>
   </authentication-provider>

</beans:beans>

弹簧XML

 <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
<beans>


    <bean id="userFormValidator" class="com.validator.UserFormValidator"/>

    <bean id="userProxy"
        class="org.springframework.aop.framework.ProxyFactoryBean">
        <property name="target" ref="userManager" />
        <property name="interceptorNames">
            <list>
                <value>transactionInterceptor</value>
            </list>
        </property>
   </bean>

    <bean id="genderManager" class="com.service.impl.GenderManagerImpl">
    </bean>

    <bean id="userProxyBean" class="org.springframework.aop.framework.ProxyFactoryBean">
        <property name="proxyInterfaces">
          <value>com.service.UserManager</value>
        </property> 
        <property name="target">
          <ref bean="userManager" />
        </property>
        <property name="interceptorNames">
          <list>
            <value>loggerAdviser</value>
          </list>
        </property>
    </bean>

    <bean id="genderProxyBean" class="org.springframework.aop.framework.ProxyFactoryBean">
        <property name="proxyInterfaces">
          <value>com.service.GenderManager</value>
        </property> 
        <property name="target">
          <ref bean="genderManager" />
        </property>
        <property name="interceptorNames">
          <list>
            <value>loggerAdviser</value>
          </list>
        </property>
    </bean>

    <bean id="loggerAdviser"  class="org.springframework.aop.support.RegexpMethodPointcutAdvisor">
      <property name="advice">
         <ref bean="loggingInterceptor"/>
      </property>
      <property name="patterns">
         <value>.*</value>
      </property>
    </bean> 

    <bean id="loggingInterceptor"  class="com.log.LoggingInterceptor"/>

    <bean id="userDetailController" class="com.web.UserDetailController">
      <property name="userManager"><ref bean="userProxyBean"/></property>
    </bean>  

    <bean id="loginController" class="com.web.LoginController">

    </bean>  

    <bean id="userController" class="com.web.UserController">
      <property name="sessionForm"><value>true</value></property>        
      <property name="commandName"><value>userBean</value></property> 
      <property name="commandClass"><value>com.beans.UserBean</value></property>   
      <property name="validator"><ref bean="userFormValidator"/></property>
      <property name="formView"><value>userForm</value></property>
      <property name="successView"><value>userDetail.do</value></property>
      <property name="userManager"><ref bean="userProxyBean"/></property>
      <property name="genderManager"><ref bean="genderProxyBean"/></property>
    </bean>

    <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
      <property name="urlMap">
         <map>
            <entry key="/user/userPage.do"><ref bean="userController"/></entry>
            <entry key="/user/userDetail.do"><ref bean="userDetailController"/></entry> 
            <entry key="/user/login.do"><ref bean="loginController"/></entry> 
         </map>
      </property>
    </bean>

    <bean id="viewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver">
        <property name="viewClass"><value>org.springframework.web.servlet.view.JstlView</value></property>
        <property name="prefix"><value>/WEB-INF/jsp/</value></property>
        <property name="suffix"><value>.jsp</value></property>
    </bean>

</beans>

web.xml

    <servlet>
        <servlet-name>context</servlet-name>
        <servlet-class>
            org.springframework.web.context.ContextLoaderServlet
        </servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <!-- Spring context loading ends-->
    <servlet>
        <servlet-name>user</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>user</servlet-name>
        <url-pattern>*.do</url-pattern>
    </servlet-mapping>

    <servlet>
       <servlet-name>dwr-invoker</servlet-name>
       <servlet-class>uk.ltd.getahead.dwr.DWRServlet</servlet-class>
       <load-on-startup>2</load-on-startup>
    </servlet>

    <servlet-mapping>
        <servlet-name>dwr-invoker</servlet-name>
        <url-pattern>/dwr/*</url-pattern>
    </servlet-mapping>

    <taglib>
        <taglib-uri>/spring</taglib-uri>
        <taglib-location>/WEB-INF/spring.tld</taglib-location>
    </taglib>

    <!-- Spring Security -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>

    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

   </web-app>

现在每当我击中http://localhost:8080/springhibernate/user/login.do http://localhost:8080/springhibernate/user/login.do它显示了登录页面，但是当单击登录时它总是给我错误

请求的资源（/springhibernate/user/j_spring_security_check）不可用。 页面被重定向到http://localhost:8080/springhibernate/user/j_spring_security_check http://localhost:8080/springhibernate/user/j_spring_security_check

请帮助我解决这个问题，并建议我如何在我的应用程序中实现此登录功能，我一直坚持下去

我有一个单独的登录表单几乎相同的设置，但在登录操作时调用以下方法：

（见编辑）

不太确定它是如何工作的，但似乎是必要的：http://ocpsoft.com/java/jsf-java/spring-security-what-happens-after-you-log-in/ http://ocpsoft.com/java/jsf-java/spring-security-what-happens-after-you-log-in/

EDIT:

my form:

<h:form id="loginForm" prependId="false">
        <label for="j_username"><h:outputText value="Username:" /><br />
        </label>
        <h:inputText id="j_username" required="true">
        </h:inputText>

        <br />
        <br />
        <label for="j_password"><h:outputText value="Password:" /><br />
        </label>
        <h:inputSecret id="j_password" required="true">
        </h:inputSecret>

        <br />
        <br />
        <label for="_spring_security_remember_me"> <h:outputText
                value="Remember me" /> </label>
        <h:selectBooleanCheckbox id="_spring_security_remember_me" />
        <br />

        <h:commandButton type="submit" id="login"
            action="#{loginBean.doLogin}" value="Login" />

    </h:form>

登录豆：

@SessionScope
public class LoginBean implements Serializable
{  
    private String j_username;        
    private String j_password;        
    private String _spring_security_remember_me;        

    public String getJ_username() {
        return j_username;
    }    
    public void setJ_username(String j_username) {
        this.j_username = j_username;
    }    
    public String getJ_password() {
        return j_password;
    }    
    public void setJ_password(String j_password) {
        this.j_password = j_password;
    }    
    public String get_spring_security_remember_me() {
        return _spring_security_remember_me;
    }    
    public void set_spring_security_remember_me(String _spring_security_remember_me) {
        this._spring_security_remember_me = _spring_security_remember_me;
    }       

    // This is the action method called when the user clicks the "login" button
    public String doLogin() throws IOException, ServletException
    {
        ExternalContext context = FacesContext.getCurrentInstance().getExternalContext();

        RequestDispatcher dispatcher = ((ServletRequest) context.getRequest())
                 .getRequestDispatcher("/j_spring_security_check");

        dispatcher.forward((ServletRequest) context.getRequest(),
                (ServletResponse) context.getResponse());

        FacesContext.getCurrentInstance().responseComplete();
        // It's OK to return null here because Faces is just going to exit.
        return null;
    }
}