Custom form login (#53)

* custom login

* login Status Codes

* removed from .dockerignore

* deleted dockerignore

---------

Co-authored-by: Sundarakrishnan N <[email protected]>

.gitignore

@@ -37,4 +37,5 @@ out/
 .vscode/
 
 .env.prod
+/src/main/resources/application-prod.properties
 

src/main/java/org/ieeervce/gatekeeper/config/SecurityConfiguration.java

@@ -41,9 +41,12 @@ public PasswordEncoder passwordEncoder() {
 
     @Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
-        http.formLogin(Customizer.withDefaults()).httpBasic(Customizer.withDefaults()).authorizeHttpRequests(SecurityConfiguration::getCustomizedHttpAuthorization).csrf(AbstractHttpConfigurer::disable)
-
+        http.formLogin(httpSecurityFormLoginConfigurer -> httpSecurityFormLoginConfigurer.failureForwardUrl("/loginStatus/failed").successForwardUrl("/loginStatus/success"))
+                .httpBasic(Customizer.withDefaults())
+                .authorizeHttpRequests(SecurityConfiguration::getCustomizedHttpAuthorization)
+                .csrf(AbstractHttpConfigurer::disable)
                 .cors(customizer->customizer.configurationSource(corsConfigurationSource()));
+
         return http.build();
     }
 
@@ -56,6 +59,7 @@ private static void getCustomizedHttpAuthorization(AuthorizeHttpRequestsConfigur
                 .requestMatchers("/role").hasRole("Admin")
                 .requestMatchers("/society").hasRole("Admin")
                 .requestMatchers("/").permitAll()
+                .requestMatchers("/loginStatus/**").permitAll()
                 .requestMatchers(EndpointRequest.toAnyEndpoint()).permitAll()
                 .anyRequest().authenticated();
 

src/main/java/org/ieeervce/gatekeeper/controller/LoginStatusController.java

@@ -0,0 +1,24 @@
+package org.ieeervce.gatekeeper.controller;
+
+import org.springframework.http.HttpStatus;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+import org.springframework.web.bind.annotation.ResponseStatus;
+
+@Controller
+@RequestMapping("/loginStatus")
+public class LoginStatusController {
+    @RequestMapping("/failed")
+    @ResponseStatus(HttpStatus.UNAUTHORIZED)
+    @ResponseBody
+    void loginFailed(){
+        return;
+    }
+    @RequestMapping("/success")
+    @ResponseStatus(HttpStatus.OK)
+    @ResponseBody
+    void loginSuccess(){
+        return;
+    }
+}