提供自定义登录表单时，Spring Security是否需要自定义登录控制器？

Question

Does Spring Security 4.0.1.RELEASE require a custom login controller when providing a custom JSP page containing a login form composed of two input fields, user name and password? Spring Security sample application spring-security-samples-chat-jc has a very simple one, but spring-security-samples-form-jc doesn't define one at all.

Answer 1

WebSecurityConfigurerAdapter has the method named configure and inside it you can do something like this:

http.csrf().disable()
                .formLogin()
                .permitAll()
                .loginProcessingUrl("/login")
                .usernameParameter("email")
                .passwordParameter("password");

After this you do not need to create a controller. Just POST to /login endpoint with urlencodedparameters named as email and password.