AppFuse PassWord Management in struts framework
-
25-05-2021 - |
Frage
I got one doubt. In AppFuse during Login some action is to be called to check the credentials. In login page there is a action name /j_security-check but I can't find any action class for that action name in struts.xml file. Then how its get redirected to mainMenu.
Can someone help me with this thing
thanks and regards rajNaveen
Lösung
Currently , Appfuse2 uses Spring Security 3 as the security framework .So form action j_security-check
is handled by Spring Security 3 and it is nothing to do with Struts.
The idea is that in the web.xml
, you will found that a Spring Security 3 configuration file ( /WEB-INF/security.xml
) which configures the Security behaviour of the web application will be loaded and processed during the webapp starts up . It is configured to use DaoAuthenticationProvider
to do the authentication .
Spring security will intercept j_security-check
form action and call DaoAuthenticationProvider
to process the login request . DaoAuthenticationProvider
in turns call its UserDetailsService
, which is implemented by developers , to lookup the password for the login user and then simply comparing if the retrieved password matches the submitted password.
I suggest you check out Spring Security 3.