Login Form with Spring Security + JSF2.0 + Facelets + RichFaces

Hi fellows!! I am trying to create a login form for my webapp using richfaces in a facelets page, but i cant did it! If I use the auto-config <login-form /> in my security-context.xml, the ugly login form from spring is rendered and works fine, but I want my own login form! If someone can help it will be good for me!

Regards and thanks in advance!,
JM

PS.> Sorry for my child's english!

Juan Manuel Diaz wrote:Hi fellows!! I am trying to create a login form for my webapp using richfaces in a facelets page, but i cant did it! If I use the auto-config <login-form /> in my security-context.xml, the ugly login form from spring is rendered and works fine, but I want my own login form! If someone can help it will be good for me!

Regards and thanks in advance!,
JM

PS.> Sorry for my child's english!

What does you security-context.xml look like when you point it to your custom login page? Does your login page have an action of "j_spring_security_check" and the user is "j_username" and password is "j_password"?

Thanks

Mark

At the moment, I am at work. When I came back to home I will post the security-context.xml, login.xhtml and faces-config.xml files!

Regards,
JM

Juan Manuel Diaz wrote:At the moment, I am at work. When I came back to home I will post the security-context.xml, login.xhtml and faces-config.xml files!

Regards,
JM

Just the first two. If there is a problem in faces-config, I doubt the auto-login page would have worked.

Mark

Ok, here they are:

applicationcontext-security.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:beans="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.xsd">

<session-management invalid-session-url="/faces/timeout.xhtml">
            <concurrency-control max-sessions="1" error-if-maximum-exceeded="true" />
        </session-management>

</http>

<authentication-manager>
        <authentication-provider>
            <user-service>
                <user name="admin" password="admin" authorities="ROLE_SUPERVISOR, ROLE_USER, ROLE_TELLER" />
                <user name="jmdiaz" password="jmdiaz" authorities="ROLE_USER,ROLE_TELLER" />
            </user-service>
        </authentication-provider>
    </authentication-manager>

</beans:beans>

login.xhtml

<?xml version='1.0' encoding='UTF-8' ?>
<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ui:composition xmlns:ui="http://java.sun.com/jsf/facelets"
                template="./templates/main.xhtml"
                xmlns:h="http://java.sun.com/jsf/html"
                xmlns:rich="http://richfaces.org/rich"
                xmlns:sec="http://www.springframework.org/schema/security">
    
    <ui:define name="content">
        <h:messages />
        <h:form>
            <h:panelGrid columns="2">
                <h:outputLabel for="j_username" value="Usuario: " />
                <h:inputText id="j_username" required="true" requiredMessage="Debe ingresar un nombre de usuario."/>
                <h:outputLabel for="j_password" value="Contraseña: " />
                <h:inputSecret id="j_password" required="true" requiredMessage="Debe ingresar una contraseña."/>
                <h:commandButton id="submit" value="Ingresar" action="j_spring_security_check" />
            </h:panelGrid>
        </h:form>
    </ui:define>

</ui:composition>

I have a faces folder within the facelets that i want to securize. In the future i will have more roles and different folders for each role.

I am newbie in spring!

Regards,
JM

More info:

My idea is that the initial page is the login page, properly rendered with my app template.

Thanks,
JM

I made it works!

I understand that my login.xhtml page is just that... a login page. I was pointing to it in my welcome-file of the web.xml file... now I point to /faces/home.xhtml and everything looks works fine!

But I needed to use a <form> tag to the form... the effect of use this tag is a message telling:

Warning: This page calls for XML namespace declared with prefix form but no taglibrary exists for that namespace.

I supose that i need a loginBean to use a <h:form> tag and <h:commandButton> right?

Thanks,
JM

Juan Manuel Diaz wrote:I made it works!

I understand that my login.xhtml page is just that... a login page. I was pointing to it in my welcome-file of the web.xml file... now I point to /faces/home.xhtml and everything looks works fine!

But I needed to use a <form> tag to the form... the effect of use this tag is a message telling:

Warning: This page calls for XML namespace declared with prefix form but no taglibrary exists for that namespace.

I supose that i need a loginBean to use a <h:form> tag and <h:commandButton> right?

Thanks,
JM

I think spring security just get parameters named j_username and j_password, so you should set prependId of <h:form> to false, then spring security can get them and process.

Daniel, this older thread has already been answered. Please don't resurrect old threads.

Thanks and welcome to JavaRanch.

Mark