Question

I am trying to redirect Spring Security to a custom login page which GWT based. Here is my configuration:

<security:http pattern="/Main.html?#login" security="none" />

<security:http auto-config="true">
      <security:form-login login-page='/Main.html?#login' />
      <security:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY" />
</security:http>

From the spring security debug logs – it seems that the framework drops everything after the “#”. Does anyone know how to fix this?

Thanks.

Answer 1

There is no way to fix this. Spring security runs on server side, and data in url after hash are never sent to the server from browser. Normally you would make a separate page for login, outside of your primary GWT application.