时间戳

首页 > 解决方案 > Spring security 记得我给出错误：ERR_TOO_MANY_REDIRECTS

java - Spring security 记得我给出错误：ERR_TOO_MANY_REDIRECTS

问题描述

我最近Spring Security Token based remember me在我的Java Spring MVC web application. 我的 spring-security.xml 文件如下：

<http auto-config="true" use-expressions="true">
    <intercept-url pattern="/login**" access="permitAll" />
    <intercept-url pattern="/layout/**" access="permitAll" />
    <intercept-url pattern="/min/**" access="permitAll" />
    <intercept-url pattern="/rest/v3/**" access="permitAll" />
    <intercept-url pattern="/password/**" access="permitAll" />
    <intercept-url pattern="/register/**" access="permitAll" />
    <intercept-url pattern="/unsubscribe/**" access="permitAll" />
    <intercept-url pattern="/**" access="isFullyAuthenticated()"/>

        <form-login login-page="/login" default-target-url="/"
            authentication-failure-url="/login?error" username-parameter="username"
            password-parameter="password" />
        <logout logout-success-url="/login?logout" invalidate-session="false"  />

        <!-- enable csrf protection
        <csrf />
        -->
        <!-- access denied page -->
        <access-denied-handler error-page="/403" />

        <logout delete-cookies="JSESSIONID"/>
        <remember-me key="myAppKey" />

    </http>

实现此功能后，记住我功能正在工作。但我收到如下错误： 错误屏幕

permitAll()正如一些文档所理解的那样，我试图将选项添加到登录“URL”。但似乎没有什么对我有用。在我的所有其他 Web 应用程序中，相同的配置都适用于我。

标签： javaspringspring-mvcspring-securityremember-me

解决方案

尝试改变

<intercept-url pattern="/login**" access="permitAll" />

至

<intercept-url pattern="/login" access="permitAll" />

推荐阅读