Home/ Questions/Q 8131937
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-06T09:13:16+00:00

I have implemented spring security to protect sections of our website. I am using

  • 0

I have implemented spring security to protect sections of our website. I am using a DB (MongoDB) to store username/password. I implemented org.springframework.security.core.userdetails.UserDetailsService to lookup the account details from the DB.

I still need to add another feature: account activation. After registration, we send an activation email to a user and if he clicks on it, we mark the account as activated in the DB. Users that have not activated their account, should not be allowed to log in and should be redirected to a page for that.

Any ideas on how to implement? I need to somehow hook into the login process.

Thanks!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Custom AuthenticationManager is not needed. This feature is already available in Spring Security. Take a look to the doc, you can see the enabled property. When you create the user, if you set that property to false and user try to login, Spring will display automatically a message informing the user that account is not active.

    UPDATED

    In order to display Spring error messages, you should use this in the login page:

    <c:out value="${SPRING_SECURITY_LAST_EXCEPTION.message}" />
    • 0