Spring Boot WebSecurityConfigurerAdapter - Redirect if Login URL is entered

Question

I have my WebSecurityConfigurerAdapter configure() method

http.authorizeRequests().antMatchers("/static/**").permitAll().anyRequest().authenticated().and()
                    .formLogin().loginPage("/login")
                    // Redirection after login
                    .defaultSuccessUrl("/home", true).permitAll().and().logout()
                    // logout link. Check if there is no conflict with SAML
                    .logoutRequestMatcher(new AntPathRequestMatcher("/saml/logout")).deleteCookies("JSESSIONID")
                    .invalidateHttpSession(true).logoutSuccessUrl("/").permitAll();

How do I redirect a logged in user to /home if user tries to access /login ?

PS - My controller code

@RequestMapping(method = RequestMethod.GET, value = {"/login"})
public String getIndexPage() {
    return LOGIN_PAGE;
}

@RequestMapping(method = RequestMethod.GET, value = {"/"})
public String getHomePage() {
    return "redirect:/home";
}

when the login is successful then redirect the request to `/home`. — Mehraj Malik, May 02 '18 at 07:19
@MehrajMalik but what if he explicitly tries to access `/login` ? What you have said is already done — Prateek Narendra, May 02 '18 at 07:21
what will happen after login? I mean should not it show the home page or something like that? — Mehraj Malik, May 02 '18 at 07:23
@MehrajMalik yes. It shows a home page. However, If a user is logged in and accesses `/login` , he can see the login page. If I redirect to `/home` , theyll be stuck in infinite loop — Prateek Narendra, May 02 '18 at 07:27
then in login first check if the user already login or not. If yes, then don't do login and just redirect to /home. — Mehraj Malik, May 02 '18 at 07:29
@MehrajMalik I have added the controller code. It is a custom page. — Prateek Narendra, May 02 '18 at 07:30
Possible duplicate of [Spring MVC - Checking if User is already logged in via Spring Security?](https://stackoverflow.com/questions/12371770/spring-mvc-checking-if-user-is-already-logged-in-via-spring-security) — Mehraj Malik, May 02 '18 at 07:31

Spring Boot WebSecurityConfigurerAdapter - Redirect if Login URL is entered

0 Answers0