Question

I’m using Spring (3.1), Spring MVC (3.1) and Spring Security (3.0) in combination and I’ve put together a single JSP page that has two forms on it; One is a form to login and the other is a form to register (i.e. create a new user).

For the register form, I use the Spring form tags, backed up by a controller to handle the request but for the login form I don’t bother with the Spring form tags as I don’t believe they’re needed. There is also no controller that I need to write to handle the form submission as Spring Security takes care of authenticating so long as the request is submitted to j_spring_security_check.

The register form is working fine but the login form is a problem. It seems that when I click the submit button on the login form, the registration form is also submitted, or at least Spring thinks I’m trying to submit that form. Here is the JSP:

    <form id="loginform" method="POST" action="<c:url value='j_spring_security_check'/>">
        <label for="existing_email">Email:</label> 
        <input name="j_username" id="existing_email" type="text" value="${SPRING_SECURITY_LAST_USERNAME}" /> 

        <label for="existing_password">Password:</label> 
        <input name="j_password" id="existing_password" type="password" /> 

        <input id="login-form-submit" type="submit" value="Sign in" />
    </form>

    <form:form id="registrationform" modelAttribute="user" method="POST" action="register">
        <form:label path="username" for="email">Email:</form:label> 
        <form:input path="username" name="username" id="email" type="text" /> 
        <form:errors path="username" cssClass="formError" />

        <form:label path="password" for="password">Password:</form:label>
        <form:input path="password" name="password" id="password" type="password" />
        <form:errors path="password" cssClass="formError" />

        <input id="registration-form-submit" type="submit" value="Sign up" />
    </form:form>

Notice that form tags for the input of type submit are not present and this seems to be a normal thing to do in the examples I’ve seen. Adding form tags to the submit button I guess doesn’t make sense as it doesn’t map to anything on the target object (user in this case).

When I click the “Sign in” button I get the following exception:

SEVERE: Servlet.service() for servlet [appServlet] in context with path [/project1] threw exception [An exception occurred processing JSP page /WEB-INF/views/registration.jsp at line 29
28:         <form:form id="registrationform" modelAttribute="user" method="POST" action="register">
29:             <form:label path="username" for="username">Username:</form:label> 
30:             <form:input path="username" name="username" id="username" type="text" />
31:             <form:errors path="username" cssClass="formError" />
32:              


Stacktrace:] with root cause
java.lang.IllegalStateException: Neither BindingResult nor plain target object for bean name 'user' available as request attribute
    at org.springframework.web.servlet.support.BindStatus.<init>(BindStatus.java:141)

This I recognise from cases where you forget to include the modelAttribute attribute in form:form, but of course I don’t want to submit this form to my controller.

I have a feeling there is a mistake I’m making or a simple solution. Can anyone recommend a way around this or perhaps a different approach?

Here is the controller method that handles requests to register in case that’s needed:

    @RequestMapping(value = "**/register", method = RequestMethod.POST)
    public String registerUser(@ModelAttribute("user") @Validated User user, BindingResult errors, ModelMap model) {
        if (errors.hasErrors()) {
            return "registration";
        }
        // Other stuff then...
        return "profile"
    }

Answer 1

If you are using “user” modelAttribute in form tag then a non-null request attribute must be present with name “user”.

One way to add that in request attribute is what you did in your answer above. Other ways are:

(1) Add in ModelMap:

    @RequestMapping(value = "/loginfailed", method = RequestMethod.GET)
public String loginFailed(ModelMap model) {
    model.addAttribute("user", new User());
    model.addAttribute("error", "true");
    return "registration";
}  

(2) Add in request scope (Using WebRequest or HttpServletRequest):

    @RequestMapping(value = "/loginfailed", method = RequestMethod.GET)
public String loginFailed(ModelMap model, WebRequest webRequest) {
   webRequest.setAttribute("user", new User(), WebRequest.SCOPE_REQUEST);
    model.addAttribute("error", "true");
    return "registration";
}  

(3) Use @ModelAttribute on method:

    @ModelAttribute("user")
public User user() {
    return new User();
}  

Please also see Using @ModelAttribute on a method and Using @ModelAttribute on a method argument

Also note that you don’t have to use type attribute. See form:input and form:password.