Question

i have my own AuthenticationSuccessHandler and overriding method onAuthenticationSuccess, where i need to redirect to some page with parameters from request before authenticate (i hope you understand what i mean, sorry for my english)

getRedirectStrategy().sendRedirect(request, response, targetUrl);

How can i do this with POST method (by default it is GET method)

Answer 1

You may do it without sendRedirect method using HTTP1.1 307 Temporary Redirect status code.

But AFAIK this is not a common practice and not all web browsers may support this.

Maybe server-side forward will suit your case.

Update:

If you want to send POST-redirect using spring-security API you may implement your own RedirectStrategy.

DefaultRedirectStrategy uses response.sendRedirect that will result in 302 response code sending by servlet container (I’m not sure about every container, at least tomcat sends 302).

Update 2:

You may send 307 back setting response status and “Location” header yourself:

resp.setStatus(SC_TEMPORARY_REDIRECT);
resp.setHeader("Location", absoluteRedirectUrl);

User-agent receiving this response must do next request using the same method that was used in previous request. So if first request was POST redirected request also will be POST.