From 1ea66378f59219c817cef9f1e1c89078ba442f37 Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Wed, 8 Nov 2017 16:14:45 -0600 Subject: [PATCH] ServerHttpSecurity uses RedirectServerAuthenticationFailureHandler Issue: gh-4816 --- .../security/config/web/server/ServerHttpSecurity.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java b/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java index 5cd4a4d581..fea0a0d36c 100644 --- a/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java +++ b/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java @@ -33,6 +33,7 @@ import org.springframework.security.web.server.ServerHttpBasicAuthenticationConv import org.springframework.security.web.server.authentication.AuthenticationWebFilter; import org.springframework.security.web.server.authentication.HttpBasicServerAuthenticationEntryPoint; import org.springframework.security.web.server.authentication.RedirectServerAuthenticationEntryPoint; +import org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler; import org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler; import org.springframework.security.web.server.authentication.ServerAuthenticationEntryPointFailureHandler; import org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler; @@ -515,7 +516,7 @@ public class ServerHttpSecurity { public FormLoginBuilder loginPage(String loginPage) { this.serverAuthenticationEntryPoint = new RedirectServerAuthenticationEntryPoint(loginPage); this.requiresAuthenticationMatcher = ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST, loginPage); - this.serverAuthenticationFailureHandler = new ServerAuthenticationEntryPointFailureHandler(new RedirectServerAuthenticationEntryPoint(loginPage + "?error")); + this.serverAuthenticationFailureHandler = new RedirectServerAuthenticationFailureHandler(loginPage + "?error"); return this; }