SEC-1748: Success and failure handler in RememberMeAuthenticationFilter

[spring-projects-issues]

Morgan (Migrated from SEC-1748) said:

In my system, we have a requirement that log the user's login action. The login actions includes two ways: form login and remember me.

For the form login, the simple way is provide a customized AuthenticationSuccessHandler and AuthenticationFailureHandler to the UsernamePasswordAuthenticationFilter.

But for remember me, I found only provided two empty methods: onSuccessfulAuthentication and onUnsuccessfulAuthentication. Yes, I can provide a customized RememberMeAuthenticationFilter and overwite these two mothods. But i found it not easy. Because that I have to define other beans which RememberMeAuthenticationFilter depend on... and cannot use the auto-config.

So I would like to suggest that set two success and failure handler, just like the UsernamePasswordAuthenticationFilter. Then what I need to do is just provide these two simply handlers.

Just a suggestion, it will be appreciated if you can give me a feedback. Thanks for this great product, and thanks for your contribution.

[spring-projects-issues]

Luke Taylor said:

Support for an AuthenticationSuccessHandler has already been added (SEC-1603), but a failure handlder doesn't make much sense, since the normal pattern would be to fall through and make the user log in.

You would be better using an event listener for logging authentication information.

[spring-projects-issues]

Morgan said:

Fine, thanks