Search code examples
javahibernatespring-securitystrutsappfuse

AppFuse PassWord Management in struts framework

I got one doubt. In AppFuse during Login some action is to be called to check the credentials. In login page there is a action name /j_security-check but I can't find any action class for that action name in struts.xml file. Then how its get redirected to mainMenu.

Can someone help me with this thing

thanks and regards rajNaveen

Solution

  • Currently , Appfuse2 uses Spring Security 3 as the security framework .So form action j_security-check is handled by Spring Security 3 and it is nothing to do with Struts.

    The idea is that in the web.xml , you will found that a Spring Security 3 configuration file ( /WEB-INF/security.xml) which configures the Security behaviour of the web application will be loaded and processed during the webapp starts up . It is configured to use DaoAuthenticationProvider to do the authentication .

    Spring security will intercept j_security-check form action and call DaoAuthenticationProvider to process the login request . DaoAuthenticationProvider in turns call its UserDetailsService , which is implemented by developers , to lookup the password for the login user and then simply comparing if the retrieved password matches the submitted password.

    I suggest you check out Spring Security 3.