Spring Boot + Spring MVC + Thymeleaf自定义登录失败，但未在控制台中显示任何错误

Question

I am trying to make a simple registration/login mechanism using Spring Boot + Thymeleaf.

I managed to register a user successfully (checked the new entry in the h2-console) but I have a problem while trying to log in.

Specifically, the application is redirected to /login?error page and there is no message at the console indicating what is wrong.

After debugging I discovered that the application does not stop at my Post controller method.

I provide you with my code:

login.html

<form th:action="@{/login}" method="post" th:object="${user}">
            <div class="form-group">
                <label for="username">Username</label>
                <input th:field="*{username}" type="text" id="username" name="username" class="form-control" autofocus="autofocus"
                       placeholder="Username">
            </div>
            <div class="form-group">
                <label for="password">Password</label>:
                <input th:field="*{password}" type="password" id="password" name="password" class="form-control" placeholder="Password">
            </div>
            <div class="form-group">
                <div class="row">
                    <div class="col-sm-6 col-sm-offset-3">
                        <input type="submit"
                               name="login-submit"
                               id="login-submit"
                               class="form-control btn btn-success"
                               value="Log In">
                    </div>
                    <div class="col-sm-6 col-sm-offset-3">
                        <a th:href="@{/register}">Register</a>
                    </div>
                </div>
            </div>
        </form>

UserController.java

    @Controller
public class UserController {

    @Autowired
    private UserService userService;

    @Autowired
    private SecurityService securityService;

    @GetMapping("/login")
    public String login(Model model) {
        model.addAttribute("user", new User());
        return "login";
    }

    @PostMapping("/login")
    public String login(@ModelAttribute("user") User user) {
        securityService.login(user.getUsername(), user.getPassword());
        return "redirect:/index";
    }

    @GetMapping("/register")
    public String register(Model model) {
        model.addAttribute("user", new User());
        return "register";
    }

    @PostMapping("/register")
    public String register(@ModelAttribute("user") User user) {
        userService.save(user);
        return "redirect:/login";
    }
}

Please help, thanks in advance!

EDIT:

SecurityConfig.java

    @Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private UserDetailsService userDetailsService;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .authorizeRequests()
                .antMatchers("/h2-console/**", "/register**").permitAll()
                .anyRequest().authenticated()
                .and()
                .formLogin()
                .loginPage("/login")
                .permitAll();

        http.csrf().disable();
        http.headers().frameOptions().disable();
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService).passwordEncoder(bCryptPasswordEncoder());
    }

    @Bean("authenticationManager")
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }

    @Bean
    public BCryptPasswordEncoder bCryptPasswordEncoder() {
        return new BCryptPasswordEncoder();
    }
}

Answer 1

You don't have to implement the Login by yourself.

Simply create a login.html with a form like this:

<form action="#" th:action="@{/login}" method="post">
    <input class="form-control" id="username" name="username" th:autofocus="true"/>
    <input class="form-control" id="password" name="password"                             
    <button>Login</button>
</form>

Spring will handle everything for you.