I have incorporated Ocpsoft’s “prettyfaces” into my application and am very enjoying “pretty” names in the address bar. However, I’m finding issues with Spring Security via LoginBean, as above. After j_spring_security_check, the forward is to the unprettyfaced resource which appears distastefully in the address bar ;-(

Do you have any ideas how to forward to the “pretty” name?

Also, I use a prettylink to a Spring secured resource and include a request parameter, this is not forwarded on after the j_spring_security_check.

I do very much like prettyfaces though and love the flexibility it gives. Would be great to have a solution to fully include Spring Security.

Cheers,
Pete

PS code uploaded to same url as before

The zip file is just an example Eclipse project using Acegi / Spring Security. You can copy the contents of the zip file into a sample project and try and run it.

I’m trying to use spring security in my applications, but I don’t know how to add the libraries.

I’m using NetBeans 6.5, and I have the Spring MVC 2.5 plug in. Does this plug in come with Spring Security?

Could you please help me so that I can use Spring MVC and Security in Netbeans 6.5.
Thank you.

@PostConstruct occurrs too early in the Faces/Spring lifecycle, and at the point when the bean is constructed, the BadCredentialsException has not yet been created.

Move the handleErrorMessage() method to a PhaseListener, like so:

package uk.co.pkit.project.view.bean.login;

import javax.faces.context.FacesContext;
import javax.faces.event.PhaseEvent;
import javax.faces.event.PhaseId;
import javax.faces.event.PhaseListener;

import org.springframework.security.BadCredentialsException;
import org.springframework.security.ui.AbstractProcessingFilter;

import uk.co.pkit.project.view.util.FacesUtils;

public class LoginErrorPhaseListener implements PhaseListener
{
private static final long serialVersionUID = -1216620620302322995L;

@Override
public void beforePhase(final PhaseEvent arg0)
{
Exception e = (Exception) FacesContext.getCurrentInstance().getExternalContext().getSessionMap().get(
AbstractProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY);

if (e instanceof BadCredentialsException)
{
FacesContext.getCurrentInstance().getExternalContext().getSessionMap().put(
AbstractProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY, null);
FacesUtils.addErrorMessage(“Username or password not valid.”);
}
}

@Override
public void afterPhase(final PhaseEvent arg0)
{}

@Override
public PhaseId getPhaseId()
{
return PhaseId.RENDER_RESPONSE;
}

}