login-processing-url in Spring Security

[Benson Fung]

Hi,

Usually, it is configured in spring security application like login-processing-url="/processLogin" , but I never can see where /processLogin is defined. Please advise how it works.


Thanks

[Shiva Gajjala]

                    <sec:form-login  login-page="/loginDisplay.spring" 
                      login-processing-url="/loginForm.spring" 
                      default-target-url="/loginSuccess.spring"
                      authentication-failure-url="/loginDisplay.spring?errors"
                      username-parameter="username"
                      password-parameter="password"/>
       

In the above code, the login page is defined as /loginDisplay.spring . We can configure /loginDisplay.spring as welcome-file in web.xml .We need to return login page in our controller. suppose login.jsp page. In the login.jsp ,<form> "action" attribute value should be /loginForm.spring. We don't need to write a controller method with @RequestMapping(loginForm). Here the url goes to spring security and checks whether the user credentials are correct or not and dispatches the request to /loginSuccess.spring if correct, otherwise it goes to same page with errors i.e, /loginDisplay.spring/error.