problem adding basic spring security example

[lars wright]

I'm having trouble integrating the most basic of spring security examples into an app i've cloned off git and gotten to work ... here are the relevant files:

build.gradle

version = '1.0' apply plugin: 'jetty' apply plugin: 'eclipse-wtp' sourceCompatibility = 1.6 sourceSets { selenium } repositories { mavenCentral() } dependencies { /* JDBC Driver */ compile 'postgresql:postgresql:9.1-901-1.jdbc4' /* Hibernate */ compile 'org.hibernate:hibernate-core:4.1.9.Final' compile 'org.hibernate:hibernate-validator:4.2.0.Final' /* Spring */ compile('org.springframework:spring-context:3.1.3.RELEASE') { exclude group: 'commons-logging', module: 'commons-logging' } compile 'org.springframework:spring-orm:3.1.3.RELEASE' compile 'org.springframework:spring-webmvc:3.1.3.RELEASE' compile 'org.springframework.security:spring-security-core:3.1.3.RELEASE' compile 'org.springframework.security:spring-security-web:3.1.3.RELEASE' compile 'org.springframework.security:spring-security-config:3.1.3.RELEASE' /* Logging */ compile 'log4j:log4j:1.2.17' compile 'org.slf4j:slf4j-log4j12:1.6.1' /* Servlet */ providedCompile 'javax.servlet:servlet-api:2.5' providedCompile 'javax.servlet.jsp:jsp-api:2.1' compile 'javax.servlet:jstl:1.2' /* Test */ testCompile 'junit:junit:4.11' testCompile 'org.springframework:spring-test:3.1.3.RELEASE' /* Selenium */ seleniumCompile 'postgresql:postgresql:9.1-901-1.jdbc4' seleniumCompile 'junit:junit:4.11' seleniumCompile 'org.seleniumhq.selenium:selenium-java:2.28.0' } eclipse { classpath { plusConfigurations += configurations.seleniumCompile } } task jettyDaemon(type: org.gradle.api.plugins.jetty.JettyRun) { daemon = true } task selenium(type: Test, dependsOn: jettyDaemon) { testClassesDir = sourceSets.selenium.output.classesDir classpath = sourceSets.selenium.runtimeClasspath }

WEB-INF/web.xml
<?xml version="1.0" encoding="UTF-8"?> <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" version="2.5"> <filter> <!-- This filter has to come before other filters. --> <filter-name>characterEncodingFilter</filter-name> <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class> <init-param> <param-name>encoding</param-name> <param-value>UTF-8</param-value> </init-param> </filter> <filter-mapping> <filter-name>characterEncodingFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <!-- <listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> </listener> --> <servlet> <servlet-name>Spring MVC Dispatcher Servlet</servlet-name> <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> <init-param> <param-name>contextConfigLocation</param-name> <param-value>/WEB-INF/spring/*.xml</param-value> </init-param> </servlet> <servlet-mapping> <servlet-name>Spring MVC Dispatcher Servlet</servlet-name> <url-pattern>/</url-pattern> </servlet-mapping> <filter> <filter-name>etagFilter</filter-name> <filter-class>org.springframework.web.filter.ShallowEtagHeaderFilter</filter-class> </filter> <filter-mapping> <filter-name>etagFilter</filter-name> <servlet-name>Spring MVC Dispatcher Servlet</servlet-name> </filter-mapping> <!-- Spring Security --> <filter> <filter-name>springSecurityFilterChain</filter-name> <filter-class> org.springframework.web.filter.DelegatingFilterProxy </filter-class> </filter> <filter-mapping> <filter-name>springSecurityFilterChain</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> </web-app>

WEB-INF/spring/app-config.xml
<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd"> <!-- Scans within the base package of the application for @Components to configure as beans --> <context:component-scan base-package="com.dreamchain.skeleton" /> <!-- Bean Validation --> <bean id="validator" class="org.springframework.validation.beanvalidation.LocalValidatorFactoryBean" /> </beans>

WEB-INF/spring/mvc-config.xml

<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mvc="http://www.springframework.org/schema/mvc" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-3.0.xsd"> <!-- Configures support for @Controllers --> <mvc:annotation-driven /> <mvc:view-controller path="/" view-name="home" /> <mvc:resources mapping="/scripts/**" location="/scripts/" /> <mvc:resources mapping="/styles/**" location="/styles/" /> <mvc:resources mapping="/images/**" location="/images/" /> <!-- Resolves view names to protected .jsp resources within the /WEB-INF/views directory --> <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver"> <property name="prefix" value="/WEB-INF/views/" /> <property name="suffix" value=".jsp" /> <property name="contentType" value="text/html;charset=utf-8" /> </bean> </beans>

WEB-INF/spring/spring-security.xml

<beans:beans xmlns="http://www.springframework.org/schema/security" xmlns:beans="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.3.xsd"> <http auto-config="true"> <intercept-url pattern="/user*" access="ROLE_USER" /> </http> <authentication-manager> <authentication-provider> <user-service> <user name="mkyong" password="123456" authorities="ROLE_USER" /> </user-service> </authentication-provider> </authentication-manager> </beans:beans>

The error i get is:

java.lang.IllegalStateException: No WebApplicationContext found: no ContextLoaderListener registered?
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:251)
	at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157)
	at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
	at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157)
	at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:388)
	at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
	at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
	at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:765)
	at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:440)
	at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230)
	at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
	at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
	at org.mortbay.jetty.Server.handle(Server.java:326)
	at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
	at org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:926)
	at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:549)
	at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
	at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
	at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)
	at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)

if i simply blindly add:
<listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> </listener>

I get the folloowing error:

Nested in org.springframework.beans.factory.BeanDefinitionStoreException: IOException parsing XML document from ServletContext resource [/WEB-INF/applicationContext.xml]; nested exception is java.io.FileNotFoundException: Could not open ServletContext resource [/WEB-INF/applicationContext.xml]:
java.io.FileNotFoundException: Could not open ServletContext resource [/WEB-INF/applicationContext.xml]

If i remove all spring security related stuff, the app works fine. Any thoughts? Thanks in advance.

[Mark Spritzler]

One other hting you can configure in your web.xml for the ContextLoaderListener is the location of your xml config files. with a <context-param> tag. Or you can put an applicationContext.xml file in the WEB-INF directory that imports your config files, and with that you won't need the <context-param>

I recommend looking at the Core Spring Framework documentation's Spring MVC section.

Mark