From e1c17450b3d2a6ff3e457e4b20fb69d1b9cec44d Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Sat, 10 May 2008 12:31:14 +0000 Subject: [PATCH] Updated faqs to add infinite loop and access denied debug message --- src/site/fml/faq.fml | 42 +++++++++++++++++++++++++++++++++++++++--- 1 file changed, 39 insertions(+), 3 deletions(-) diff --git a/src/site/fml/faq.fml b/src/site/fml/faq.fml index ddcfa6ad57..568cb6c1a1 100644 --- a/src/site/fml/faq.fml +++ b/src/site/fml/faq.fml @@ -1,6 +1,6 @@ + xsi:schemaLocation="http://maven.apache.org/maven-1.x/plugins/faq/faq.xsd"> General @@ -90,5 +90,41 @@ - - \ No newline at end of file + + + + Common Problems + + My application goes into an "endless loop" when I try to login, what's going on? +

A common user problem with infinite loop and redirecting to the login page is caused + by accidently configuring the login page as a "secured" resource. Make sure your configuration + allows anonymous access to the login page, either by excluding it from the security filter + chain or marking it as requiring ROLE_ANONYMOUS.

+

If your AccessDecisionManager includes an AutheticatedVoter, you can use the attribute + "IS_AUTHENTICATED_ANONYMOUSLY". This is automatically available if you are using the + standard namespace configuration setup. +

+

+ From Spring Security 2.0.1 onwards, when you are using namespace-based configuration, a check will be made + on loading the application context and a warning message logged if your login page appears to be protected. +

+
+
+ + I get an exception with the message "Access is denied (user is anonymous);". What's wrong? + +

+ This is a debug level message which occurs the first time an anonymous user attempts to access a protected + resource. +

+DEBUG [ExceptionTranslationFilter] - Access is denied (user is anonymous); redirecting to authentication entry point
+org.springframework.security.AccessDeniedException: Access is denied
+    at org.springframework.security.vote.AffirmativeBased.decide(AffirmativeBased.java:68)
+    at org.springframework.security.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:262)    				
+    			
+ It is normal and shouldn't be anything to worry about. +

+
+
+
+ \ No newline at end of file