blocks|key|285655|text|只是个主意，还没来得及测试。只限于客户端。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|285656|将事件侦听器放在链接/按钮-单击事件上|ordered-list-item|285657|使用Javascript并通过XMLHttpRequest调用表单操作或链接。|offset|length|style|CODE|285658|检查HTTP代码：xhr.status|285659|如果(确定)用目标url+(通过Html5历史API)替换当前的url，并用xhr.responseText+(通过W3C+DOM替换整个HTML文档的其他选项是什么？)替换整个文档|285660|否则，如果(重定向)只需遵循重定向|285661|如果(未经授权)打开弹出|285662|entityMap|0|LINK|mutability|MUTABLE|url|https://developer.mozilla.org/en-US/docs/Web/Guide/API/DOM/Manipulating_the_browser_history|1|https://stackoverflow.com/q/4297877/4054694^0|0|0|F|E|0|9|A|0|12|G|E|C|0|1K|S|1|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|13|8|@]|9|@]|A|$]]|$1|E|3|F|5|D|7|14|8|@$G|15|H|16|I|J]]|9|@]|A|$]]|$1|K|3|L|5|D|7|17|8|@$G|18|H|19|I|J]]|9|@]|A|$]]|$1|M|3|N|5|D|7|1A|8|@$G|1B|H|1C|I|J]]|9|@$G|1D|H|1E|1|1F]|$G|1G|H|1H|1|1I]]|A|$]]|$1|O|3|P|5|D|7|1J|8|@]|9|@]|A|$]]|$1|Q|3|R|5|D|7|1K|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1L|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]|10|$5|V|W|X|A|$Y|11]]]]

Just an idea, haven't had time to test it. It's client-side only.

<ol>
<li>Put an Eventlistener on the Link/Button-Click-Event</li>
<li>Use Javascript and call the form-action or link via <code>XMLHttpRequest</code></li>
<li>Check the HTTP status code: <code>xhr.status</code></li>
<li>if (OK) replace the current url with the target url (<a href="https://developer.mozilla.org/en-US/docs/Web/Guide/API/DOM/Manipulating_the_browser_history" rel="nofollow noreferrer">via Html5 History API</a>) and replace the entire document with <code>xhr.responseText</code> (<a href="https://stackoverflow.com/q/4297877/4054694">What other options for replacing entire HTML document via W3C DOM</a>)</li>
<li>else if (Redirect) just follow the redirect </li>
<li>else if (Unauthorized) open popup</li>
</ol>

blocks|key|285268|text|将任务分解为组件。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|285269|创建一个根据你的标准激活的灯箱。|285270|通过ajax使表单可提交。|285271|身份验证控制器需要执行以下操作：|285272|如果继承完整的->重定向到签出页面，如果不完整，则返回一个片段，说明为什么不正确。|285273|如果返回不正确，则需要完全刷新表单元素，以确保不发生csrf攻击。|285274|这就是我所做的，不能给你代码，因为它的变化取决于你如何设置你的项目和视图呈现。|285275|entityMap^0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|S|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|T|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|U|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|V|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|O|$]]

Break down the task into components.

Create a light box that activates based on your critera.

Make your form submittable via ajax.

Your authentication controller needs to do the following:

if succesfull -> redirect to checkout page
if un-succesfull return a fragment advising why its incorrect.

If return of incorrect you need to refresh your form element completely to ensure no csrf attacks.

Thats way i've done mine, can't give you code as it varies depending on how you have setup your project and view rendering.

blocks|key|1524133|text|您可以使用http基本身份验证，至少在需要身份验证时，它将始终打开弹出窗口。http://www.baeldung.com/spring-security-basic-authentication|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1524134|entityMap|0|LINK|mutability|MUTABLE|url|http://www.baeldung.com/spring-security-basic-authentication^0|12|1O|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

You can maybe use http basic authentication, it at least will always open a popup when you need to be authenticated. <a href="http://www.baeldung.com/spring-security-basic-authentication" rel="nofollow">http://www.baeldung.com/spring-security-basic-authentication</a>

blocks|key|1524202|text|当用户点击Buynow按钮时，您可以使用ajax调用来检查用户是否经过身份验证。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|1524203|如果对用户进行了身份验证，则提交产品购物车表单或将其转发到下一个视图(控制器方法)。|1524204|如果未通过身份验证，则可以打开弹出以供登录。|1524205|在登录表单中，如果成功将cart表单提交到下一个视图，则使用ajax验证用户，否则提供错误消息。|1524206|将购物车信息存储在会话中，以便在下一个视图中使用它们。|1524207|entityMap^0|5|6|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|T|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|U|8|@]|D|@]|E|$]]|$1|L|3|M|5|6|7|V|8|@]|D|@]|E|$]]|$1|N|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|O|$]]

You can use ajax call when user hits on Buynow button to check whether the user is authenticated or not.

If the user is authenticated submit or forward the product cart form to next view (controller method).

If not authenticated you can open a popup for login.

In login form use ajax to validate user if success submit cart form to next view else give error message. 

Store the cart information in the session so that you can use them in the next view.

blocks|key|599817|text|弹出盒在某些事件上的实现必须由您来完成(您可以使用任何前端框架)。虽然身份验证是值得关注的，但"project-security.xml“将为您完成此任务。您只应该根据您的需求配置它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|599818|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Pop box implementation on some event has to be done you (you can use any frontend framework for this). Whereas authentication is concern, "project-security.xml" will do it for you. You should only configure it as per your requirement.

blocks|key|1524315|text|实际上，Security支持重定向，看看SavedRequestAwareAuthenticationSuccessHandler，所以您唯一需要做的就是保护购买按钮的url(例如，您有类似于<intercept-url+pattern+=+"/purchase/*"+access+=+"isAuthenticated()"+/>+(或者如果access+=+"hasRole('user')在那里做的任何操作)的内容(它确实请求"/purchase/"productIdHere"或/purchase?productId=someProductId)，然后将用户重定向到登录页面，在成功登录后，用户应该回到原来的页面。在您的控制器中，您可以处理以下请求：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1524316|@Controller
...

@RequestMapping(value+=+"/purchase...,+method+=+....)
public+ModelAndView+purchase(@PathVariable("productId")+String/Long+productId+(or+@RequestParam+etc...)
Product+someProduct+=+someService.getByProductId(productId);
ModelAndView+mav+=+new+ModelAndView("view.name");
mav.setObject("product",product);
return+mav;|code-block|syntax|javascript|1524317|你必须根据你的需要来匹配其他的东西，只是想按照你的要求指出正确的方向。。|BOLD|1524318|希望能帮上忙。|1524319|entityMap|0|LINK|mutability|MUTABLE|url|http://docs.spring.io/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/web/authentication/SavedRequestAwareAuthenticationSuccessHandler.html^0|2O|1Y|4S|P|60|Q|6R|X|K|19|0|0|0|0|Z|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@$9|Y|A|Z|B|C]|$9|10|A|11|B|C]|$9|12|A|13|B|C]|$9|14|A|15|B|C]]|D|@$9|16|A|17|1|18]]|E|$]]|$1|F|3|G|5|H|7|19|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|1A|8|@$9|1B|A|1C|B|M]]|D|@]|E|$]]|$1|N|3|O|5|6|7|1D|8|@]|D|@]|E|$]]|$1|P|3|-4|5|6|7|1E|8|@]|D|@]|E|$]]]|Q|$R|$5|S|T|U|E|$V|W]]]]

Actually Spring Security supports the redirect out of the box, take a look at <a href="http://docs.spring.io/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/web/authentication/SavedRequestAwareAuthenticationSuccessHandler.html" rel="nofollow">SavedRequestAwareAuthenticationSuccessHandler</a>, so the only thing you have to do is to secure the url(for e.g. you have something like <code>&lt;intercept-url pattern = "/purchase/*" access = "isAuthenticated()" /&gt;</code> (or if <code>access = "hasRole('user')</code> whatever you do there) of your purchase button(which does request like <code>"/purchase/"productIdHere"</code> or <code>/purchase?productId=someProductId</code>), which will then redirect user to login page and after successful login he should be back to his original page.
And in your controller you can handle the request like:

<pre><code>@Controller
...

@RequestMapping(value = "/purchase..., method = ....)
public ModelAndView purchase(@PathVariable("productId") String/Long productId (or @RequestParam etc...)
Product someProduct = someService.getByProductId(productId);
ModelAndView mav = new ModelAndView("view.name");
mav.setObject("product",product);
return mav;
</code></pre>

You have to match other things per your needs, just trying to point the right direction as you asked.

Hope it helps.

blocks|key|601391|text|您可以使用Ajax身份验证使用CSS登录表单(只需搜索web+)，也可以使用Spring弹出。每个页面都应该检查用户是否经过身份验证(显示弹出窗口)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|601392|请查看这两篇文章，展示如何实现这两种解决方案：|601393|在Java和Spring中向RESTful服务添加|offset|length|601394|Spring安全Ajax登录|601395|entityMap|0|LINK|mutability|MUTABLE|url|http://syntx.io/adding-http-basic-auth-to-restful-services-in-java-and-spring/|1|http://www.javacodegeeks.com/2012/08/spring-security-3-ajax-login-accessing.html^0|0|0|0|P|0|0|0|E|1|0^^$0|@$1|2|3|4|5|6|7|T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|U|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$F|W|G|X|1|Y]]|A|$]]|$1|H|3|I|5|6|7|Z|8|@]|9|@$F|10|G|11|1|12]]|A|$]]|$1|J|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]|R|$5|M|N|O|A|$P|S]]]]

You can use a CSS HTML login form (just search the web for it) with Ajax authentication or use the Spring Http Basic Auth popup. Every page should check if the user is authenticated or not (showing the popup). 

Check these two articles showing how you can implement both solutions:

<a href="http://syntx.io/adding-http-basic-auth-to-restful-services-in-java-and-spring/" rel="nofollow">Adding Http Basic Auth to RESTful Services in Java and Spring</a>

<a href="http://www.javacodegeeks.com/2012/08/spring-security-3-ajax-login-accessing.html" rel="nofollow">Spring security Ajax login</a>

blocks|key|1524416|text|Spring安全性工作在Spring之上--它使用重定向。因此，当用户试图访问“安全”内容时，他还没有经过身份验证，那么HTTP+302将返回并重定向到登录页面。如果你对弹出窗口感兴趣，你打破了MVC模型，它当然可以实现，但你的生活会更加困难.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1524417|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Spring security works over Spring MVC - it uses redirects. So the idea is when a user tries to reach a "secured" content, and he has not been authenticated, then HTTP 302 is return and redirect to the login page. If you are interested in pop-up window, you break the MVC model, and it can be implemented of course, but your life will be much harder ....

Someone knows how to open a popup login to authenticate (using spring security) when the user does something that needs to be authenticated and he is not.

For example: Lets imagine the page has one button "buy now" that add the product to the cart and perform the checkout (buy now page), if the user is already authenticated, or, opens a popup for the user perform the authentication. 

If the authentication is successful than the spring redirects to the "buy now" page or stays in that page with the popup opened (with an error message "wrong login").

I already searched in google for a kind of solution but without luck.

Someone can point me in the right direction?

Thanks

Spring security opening a popup login

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

有人知道如何打开弹出登录来验证(使用spring安全性)，当用户做了一些需要认证的事情，而他却没有。例如:假设页面有一个按钮“立即购买”，该按钮将产品添加到购物车并执行签出(购买现在页面)，如果用户已经通过身份验证，或者打开一个弹出供用户执行身份验证。如果身份验证比spring重定向到“立即购买”页面成功，或者在弹出窗口打开时停留在该页面中(带有错误消息“错误登录”)。我已经在谷歌搜索了一种解决方

问弹簧安全打开弹出式登录
EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问弹簧安全打开弹出式登录EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问弹簧安全打开弹出式登录
EN