Login Logout use case in Spring security

Question

I am trying to create login use case using spring security(I am referring this example ).

After entering the username and password if a click login button, it is requesting for

j_spring_security_check.htm 

url and am getting HTTP Status 404 - for the above URL.

Am using netbeans IDE. I don't know where am going wrong. Please Help.

Here is the contents of web.xml

<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>/WEB-INF/applicationContext.xml</param-value>
    </context-param>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <servlet>
        <servlet-name>dispatcher</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <load-on-startup>2</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>dispatcher</servlet-name>
        <url-pattern>*.htm</url-pattern>
    </servlet-mapping>

    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>redirect.jsp</welcome-file>
    </welcome-file-list>
</web-app>

This is the code to the login form in login.jsp

<c:if test="${not empty error}">
                <div class="errorblock">
        Your login attempt was not successful, try again.<br /> Caused :
        ${sessionScope["SPRING_SECURITY_LAST_EXCEPTION"].message}
                </div>
</c:if>


            <form name='f' action="<c:url value='j_spring_security_check.htm' />" method="POST">

                <div style="margin-left: 27%">
                    <input type="text" name="j_username" value="" placeholder="Username" class="login_hint" id="username" title="Username" />
                    <br/>
                    <input type="password" name="j_password" value="" placeholder="Password" class="login_hint" id="password" title="Password" />
                    <br />
                    <input type ="submit" value ="Login" class ="btn btn-primary loginBtn"/>
                 </div>
            </form>

Here is the contents of applicationContext-security.xml

<beans:beans xmlns="http://www.springframework.org/schema/security"
        xmlns:beans="http://www.springframework.org/schema/beans" 
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
        http://www.springframework.org/schema/security
        http://www.springframework.org/schema/security/spring-security-3.0.3.xsd">

        <http auto-config="true">
                <intercept-url pattern="/admin*" access="ROLE_USER" />
                <form-login login-page="/login" default-target-url="/admin/home.htm"
                        authentication-failure-url="/loginfailed" />
                <logout logout-success-url="/logout" />
        </http>

        <authentication-manager>
          <authentication-provider>
                <user-service>
                        <user name="admin" password="root" authorities="ROLE_USER" />
                </user-service>
          </authentication-provider>
        </authentication-manager>

</beans:beans>

Answer 1

The UsernamePasswordAuthenticationFilter intercepts requets sent to /j_spring_security_check (by default), so most probably you only need to remove the .htm ending from the action URL in login.jsp :

<form name='f' action="<c:url value='j_spring_security_check'/>" method="POST">

Oh well, it seems some stuff is missing from web.xml as well. You will need to set up the security filter chain:

<filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>

<filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

Answer 2

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">

  <display-name>Sample</display-name>
  <servlet>
    <servlet-name>appServlet</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    <init-param>
      <param-name>contextConfigLocation</param-name>
      <param-value>
                /WEB-INF/spring/appServlet/servlet-context.xml
            </param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
  </servlet>
  <servlet-mapping>
    <servlet-name>appServlet</servlet-name>
    <url-pattern>*.htm</url-pattern>
  </servlet-mapping>
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
            /WEB-INF/spring/root-context.xml,
            /WEB-INF/spring/spring-security.xml
            </param-value>
  </context-param>
  <listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  </listener>
  <filter>
    <filter-name>springSecurityFilterChain</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>springSecurityFilterChain</filter-name>
    <url-pattern>*</url-pattern>
  </filter-mapping>
  <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>

</web-app>

Just have the servlet - url mapping as *.htm and filter-mapping url pattern as *

Try this. It will Work. hope this helps