*
The moose likes Spring and the fly likes Spring Security - JSF login authentication issue Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Frameworks » Spring
Bookmark "Spring Security - JSF login authentication issue" Watch "Spring Security - JSF login authentication issue" New topic
Author

Spring Security - JSF login authentication issue

anandhkumar thiyagarajan
Greenhorn

Joined: Nov 10, 2009
Posts: 4
Hi Everyone,

I was trying to integrate spring security with JSF for login authentication. I am running into some problem which i am not able to figure out. Below mentioned are the required files

Dispatcher-Servlet.xml




applicationContext-security.xml



web.xml



UserLoginService.java



Users.java

[B][I]package com.mq.updatemanager.domain;

// Generated Jan 7, 2013 5:57:29 PM by Hibernate Tools 3.4.0.CR1



face-config.xml




login.xhtml



STACKTRACE


12:56:49.953 48864 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:49.954 48865 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:49.955 48866 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/login.xhtml'; against '/login.xhtml'
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login.xhtml; Attributes: [permitAll]
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.access.vote.AffirmativeBased - Voter: org.springframework.security.web.access.expression.WebExpressionVoter@54f169, returned: 1
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
12:56:49.956 48867 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml reached end of additional filter chain; proceeding with original chain
1
2
3 : org.apache.catalina.core.ApplicationDispatcher@101f287
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.009 48920 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.010 48921 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /j_spring_security_check at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.010 48921 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Request is to process authentication
12:56:50.014 48925 [http-8080-1] DEBUG org.springframework.security.authentication.ProviderManager - Authentication attempt using org.springframework.security.authentication.dao.DaoAuthenticationProvider
helo :
12:56:50.015 48926 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.authentication.event.AuthenticationFailureServiceExceptionEvent[source=org.springframework.security.authentication.UsernamePasswordAuthenticationToken@1c065: Principal: ; Credentials: [PROTECTED]; Authenticated: false; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Not granted any authorities]
12:56:50.015 48926 [http-8080-1] DEBUG org.springframework.beans.factory.support.DefaultListableBeanFactory - Returning cached instance of singleton bean 'org.springframework.security.core.session.SessionRegistryImpl#0'
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Authentication request failed: org.springframework.security.authentication.AuthenticationServiceException: UserDetailsService returned null, which is an interface contract violation
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Updated SecurityContextHolder to contain null Authentication
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter - Delegating to authentication failure handlerorg.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler@5f8245
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Interactive login attempt was unsuccessful.
12:56:50.016 48927 [http-8080-1] DEBUG org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices - Cancelling cookie
12:56:50.018 48929 [http-8080-1] DEBUG org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler - Redirecting to /login.xhtml?error=true
12:56:50.019 48930 [http-8080-1] DEBUG org.springframework.security.web.DefaultRedirectStrategy - Redirecting to '/Updatemanager/login.xhtml?error=true'
12:56:50.019 48930 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
4
5

12:56:50.027 48938 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.027 48938 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.030 48941 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.031 48942 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.032 48943 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.034 48945 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.034 48945 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/login.xhtml'; against '/login.xhtml'
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Secure object: FilterInvocation: URL: /login.xhtml?error=true; Attributes: [permitAll]
12:56:50.035 48946 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.access.vote.AffirmativeBased - Voter: org.springframework.security.web.access.expression.WebExpressionVoter@54f169, returned: 1
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Authorization successful
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - RunAsManager did not change Authentication object
12:56:50.036 48947 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /login.xhtml?error=true reached end of additional filter chain; proceeding with original chain
12:56:50.048 48959 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.049 48960 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.049 48960 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.113 49024 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.114 49025 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.115 49026 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/stylesheets/design.css'; against '/login.xhtml'
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/stylesheets/design.css]
12:56:50.116 49027 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/design.css reached end of additional filter chain; proceeding with original chain
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.117 49028 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.121 49032 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.121 49032 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.122 49033 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.123 49034 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.124 49035 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/stylesheets/newweb.css'; against '/login.xhtml'
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/stylesheets/newWeb.css]
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/stylesheets/newWeb.css reached end of additional filter chain; proceeding with original chain
12:56:50.125 49036 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.127 49038 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.131 49042 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.132 49043 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/scripts/jquery-1.7.1.min.js'; against '/login.xhtml'
12:56:50.133 49044 [http-8080-2] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/scripts/jquery-1.7.1.min.js]
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/scripts/jquery-1.7.1.min.js reached end of additional filter chain; proceeding with original chain
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.134 49045 [http-8080-2] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.135 49046 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.136 49047 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.169 49080 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.170 49081 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/images/logo_indx.png'; against '/login.xhtml'
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/images/logo_indx.png]
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logo_indx.png reached end of additional filter chain; proceeding with original chain
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.171 49082 [http-8080-1] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
12:56:50.173 49084 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 1 of 12 in additional filter chain; firing Filter: 'ConcurrentSessionFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 2 of 12 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@17777a1. A new one will be created.
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 3 of 12 in additional filter chain; firing Filter: 'LogoutFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 4 of 12 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 5 of 12 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
12:56:50.174 49085 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 6 of 12 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 7 of 12 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 8 of 12 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 9 of 12 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.authentication.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: RemoteIpAddress: 127.0.0.1; SessionId: 80976F769B86AAAC4084DA37322573D7; Granted Authorities: ROLE_ANONYMOUS'
12:56:50.175 49086 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 10 of 12 in additional filter chain; firing Filter: 'SessionManagementFilter'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 11 of 12 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png at position 12 of 12 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.util.AntPathRequestMatcher - Checking match of request : '/webcontent/images/logobotm.png'; against '/login.xhtml'
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.security.web.access.intercept.FilterSecurityInterceptor - Public object - authentication not attempted
12:56:50.176 49087 [http-8080-2] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.access.event.PublicInvocationEvent[source=FilterInvocation: URL: /WebContent/images/logobotm.png]
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.FilterChainProxy - /WebContent/images/logobotm.png reached end of additional filter chain; proceeding with original chain
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.context.HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
12:56:50.177 49088 [http-8080-2] DEBUG org.springframework.security.web.access.ExceptionTranslationFilter - Chain processed normally
12:56:50.178 49089 [http-8080-2] DEBUG org.springframework.security.web.context.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
13:27:18.573 1877484 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.security.web.session.HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@17777a1]
13:27:18.588 1877499 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.web.context.support.XmlWebApplicationContext - Publishing event in Root WebApplicationContext: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@17777a1]
13:27:18.589 1877500 [ContainerBackgroundProcessor[StandardEngine[Catalina]]] DEBUG org.springframework.beans.factory.support.DefaultListableBeanFactory - Returning cached instance of singleton bean 'org.springframework.security.core.session.SessionRegistryImpl#0'

I am not able to login as i am repeatedly indicated the above mentioned exception(highlighted in the STACKTRACE)

Any help would be greatly appreciated

Thanks
Anandh
Sagar Rohankar
Ranch Hand

Joined: Feb 19, 2008
Posts: 2902
    
    1

Anyone can get frightened by looking at such big code snippets, you've to learn public-forum-question-writing skill.

anyway, this line explains it all:

Don't return null.


[LEARNING bLOG] | [Freelance Web Designer] | [and "Rohan" is part of my surname]
 
It is sorta covered in the JavaRanch Style Guide.
 
subject: Spring Security - JSF login authentication issue