스프링 시큐리티 설정좀 봐주세요... 로그인 페이지가 302에러 발생합니다.

Question

로그인 페이지 진입할려고 하면localhost에서 리디렉션한 횟수가 너무 많습니다.네트워크 탭 확인하면 302 에러 발생합니다...시큐리티 설정 2개이고, 1개는 클래스 주석 처리 해놨습니다.Deprecated 버전으로 되돌리면 이상 없이 들어는 가집니다. (WebSecurityConfigurerAdapter 상속)신규 버전이 문제입니다.얼마 전까지 확인했었는데, 건드린 것도 없는데 갑자기 그러네요...설정좀 봐주셨으면 합니다.Deprecated 버전과 차이점은 다음과 같습니다. 그 외에는 동일합니다...WebSecurity : antMatchers 는 동일하나 방식이 다름HttpSecurity : return http.build()authenticationManager 설정@Configuration @EnableWebSecurity public class SecurityConfig { @Bean public BCryptPasswordEncoder bcryptPasswordEncoder() { return new BCryptPasswordEncoder(); } @Bean public WebSecurityCustomizer webSecurityCustomizer() { return web -> web.ignoring() .antMatchers("/", "/css/**", "/font/**", "/images/**", "/js/**", "/mdb/**", "/upload/**", "/jqUi/**", "/favicon.ico", "/publish/**", "/bracket/**") .antMatchers("/xdm/user/userJoinSignCerti.do", "/xdm/user/userRegistPage.do", "/xdm/user/userIdFindPage.do", "/xdm/user/userPwdFindPage.do", "/xdm/user/userCertificationCheck.do") .antMatchers("/test/**"); } @Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { http .formLogin() .loginProcessingUrl("/j_spring_security_check.do") .loginPage("/") .usernameParameter("userId") .passwordParameter("userPw") .successHandler(this.accessSuccessHandler()) .failureHandler(this.accessFailureHandler()) .and() .addFilterBefore(this.sessionManagementFilter(), SessionManagementFilter.class) .addFilterBefore(this.filterSecurityInterceptor(this.authenticationManager(http.getSharedObject(AuthenticationConfiguration.class))), FilterSecurityInterceptor.class) .exceptionHandling() .accessDeniedHandler(this.iGAccessDeniedHandler()) .and() .sessionManagement() .maximumSessions(1) .expiredUrl("/xdm/user/xdmLogout.do?typeCode=2") ; return http.build(); } // XXX user의 경우, AJAX 로그인 실패하지만 화면 새로고침하면 로그인 상태됨 // @Bean // public InMemoryUserDetailsManager userDetailService() { // List userDetailsList = new ArrayList<>(); // userDetailsList.add(User.withUsername("admin").password(this.bcryptPasswordEncoder().encode("1q2w3e4r")).roles("ADMIN").build()); // userDetailsList.add(User.withUsername("user").password(this.bcryptPasswordEncoder().encode("1q2w3e4r")).roles("USER").build()); // return new InMemoryUserDetailsManager(userDetailsList); // } @Bean public UserDetailsManager userDetailService(DataSource dataSource) { StringBuilder userQuery = new StringBuilder(); userQuery.append("SELECT A.USER_ID AS username "); userQuery.append(" , A.USER_PW AS password "); userQuery.append(" , CASE WHEN A.USE_YN = 'Y' "); userQuery.append(" THEN CASE WHEN A.USER_STATUS = 'ST001' "); userQuery.append(" THEN 1 "); userQuery.append(" ELSE 0 END "); userQuery.append(" ELSE 0 END AS enabled "); userQuery.append(" FROM IFI_USER_INFO A "); userQuery.append(" WHERE A.USER_ID = ? "); StringBuilder authQuery = new StringBuilder(); authQuery.append("SELECT A.USER_ID AS username "); authQuery.append(" , D.AUTHOR_ID AS role "); authQuery.append(" FROM IFI_USER_INFO A "); authQuery.append(" INNER JOIN IFI_USER_MNG_MAPNG B "); authQuery.append(" ON A.USER_ID = B.USER_ID "); authQuery.append(" INNER JOIN IFI_USER_MNG C "); authQuery.append(" ON B.USER_CD = C.USER_CD "); authQuery.append(" INNER JOIN IFI_AUTHOR_USER_MAPNG_HIST D "); authQuery.append(" ON C.USER_CD = D.USER_CD "); authQuery.append(" AND D.USE_YN = 'Y' "); authQuery.append(" WHERE A.USER_ID = ? "); authQuery.append(" AND A.USE_YN = 'Y' "); JdbcUserDetailsManager users = new JdbcUserDetailsManager(dataSource); users.setUsersByUsernameQuery(userQuery.toString()); users.setAuthoritiesByUsernameQuery(authQuery.toString()); return users; } @Bean public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception { return authenticationConfiguration.getAuthenticationManager(); } @Bean public IGAccessDeniedHandler iGAccessDeniedHandler() { IGAccessDeniedHandler iGAccessDeniedHandler = new IGAccessDeniedHandler(); iGAccessDeniedHandler.setAccessDeniedUrl("/error/errorDenied.do"); return iGAccessDeniedHandler; } @Bean public SessionManagementFilter sessionManagementFilter() { IGInvalidSessionStrategyFilter iGInvalidSessionStrategyFilter = new IGInvalidSessionStrategyFilter(); iGInvalidSessionStrategyFilter.setInvalidSessionUrl("/xdm/ig/main.do"); SessionManagementFilter sessionManagementFilter = new SessionManagementFilter(new HttpSessionSecurityContextRepository()); sessionManagementFilter.setInvalidSessionStrategy(iGInvalidSessionStrategyFilter); return sessionManagementFilter; } @Bean public AffirmativeBased accessDecisionManage() { RoleVoter roleVoter = new RoleVoter(); roleVoter.setRolePrefix(""); List> roleVoters = new ArrayList<>(); roleVoters.add(roleVoter); AffirmativeBased affirmativeBased = new AffirmativeBased(roleVoters); affirmativeBased.setAllowIfAllAbstainDecisions(false); return affirmativeBased; } @Bean public IGDynamicSecurityFactoryBean requestAuthority() { return new IGDynamicSecurityFactoryBean(); } @Bean public IGDynamicSecurityReloadMetadataSource iGDynamicSecurityReloadMetadataSource() throws Exception { IGDynamicSecurityReloadMetadataSource iGDynamicSecurityReloadMetadataSource = new IGDynamicSecurityReloadMetadataSource(this.requestAuthority().getObject()); return iGDynamicSecurityReloadMetadataSource; } // XXX Bean으로 등록하면 An Authentication object was not found in the SecurityContext 오류 남 public FilterSecurityInterceptor filterSecurityInterceptor(AuthenticationManager authenticationManager) throws Exception { FilterSecurityInterceptor filterSecurityInterceptor = new FilterSecurityInterceptor(); filterSecurityInterceptor.setAuthenticationManager(authenticationManager); filterSecurityInterceptor.setAccessDecisionManager(this.accessDecisionManage()); filterSecurityInterceptor.setSecurityMetadataSource(this.iGDynamicSecurityReloadMetadataSource()); return filterSecurityInterceptor; } @Bean public IGAuthenticationSuccessHandler accessSuccessHandler() { IGAuthenticationSuccessHandler iGAuthenticationSuccessHandler = new IGAuthenticationSuccessHandler(); iGAuthenticationSuccessHandler.setSuccessUrl("/xdm/ig/main.do"); return iGAuthenticationSuccessHandler; } @Bean public IGAuthenticationFailureHandler accessFailureHandler() { return new IGAuthenticationFailureHandler(); } }

kdk1026 · Answer

얼라... 이전 시큐리티 버전으로 돌려서 실행하고, 다시 신규 버전으로 돌리니까 들어가지네요... 캐시 등 날렸는데... 갑자기 왜 안됐던건지 모르겠네요...

스프링 시큐리티 설정좀 봐주세요... 로그인 페이지가 302에러 발생합니다.

1개의 답변

#302 목록