Spring Security用户已登录，但已重定向到拒绝访问页面

Question

I am currently working on a project with Spring 4, Spring Security 4, Hibernate 4, MySQL 5. When I login with the user credentials, it logs in but takes me to unauthenticated user page. I tried debugging the code in eclipse but I am not able to find out why it goes to the unauthenticated user page. We are using 4 different types of users for the project, so the database design given to me was a little different.

I have also asked the same question in coderanch 4 days ago but I didn't receive any answers. Here is the link to the question Coderanch . I have added the source files there for reference.

If you guys need any more files, please ask me and I shall provide you the same here.

Answer 1

本教程将帮助您了解其工作原理，并解决以下问题： Spring MVC 4 + Spring Security 4 + Hibernate Example

Answer 2

For people looking answers to this question, here is the trick. You will have to add "ROLE_" in your SimpleGrantedAuthority object if you are fetching roles from database. That is

authorities.add(new SimpleGrantedAuthority("ROLE_" + user.getType());

The explanation of why we should add the "ROLE_" token is given in this doc .

From the docs,
The prefix "ROLE_" is a marker which indicates that a simple comparison with the user's authorities should be made. In other words, a normal role-based check should be used. Access-control in Spring Security is not limited to the use of simple roles (hence the use of the prefix to differentiate between different types of security attributes).

Answer 3

除了Parthe的答案以外，您可能还需要确保用于登录的用户帐户至少具有列出的角色之一（“ SUPER ADMIN”，“ ADMIN”，“ STAFF”）。