[SHIRO-410] Clarify the configuration for the form based login

• Type: Improvement
• Status: Open
• Priority: Trivial
• Resolution: Unresolved
• Affects Version/s: 1.2.1
• Component/s: Documentation
• Assignee: Unassigned
• Reporter: Emmanuel Bourg
• Created: 14/Jan/13 16:11
• Updated: 04/May/13 23:40

Description

I just started learning Shiro and I struggled a bit to integrate a simple form based login into my web application. My mistake was to exclude the loginUrl from the urls covered by the FormAuthenticationFilter. I assumed the login form had to be accessible to anonymous users, so my configuration looked like this:

[main]
authc.loginUrl = /account/login.jsp

[urls]
/account/login.jsp = anon
/account/register.jsp = anon
/account/reset.jsp = anon
/account/** = authc

But this doesn't work because login.jsp must be processed by authc.

I would suggest mentioning this detail in the reference manual, that wasn't obvious at first glance (but maybe I didn't read carefully enough).