Spring Security AccessDeniedException trava a aplicação

Olá
Eu estou tentando aprender spring security e estava fazendo uns exemplos de um livro.
Eu criei um projeto com pastas publicas e outras que precisam de autorização para ser acessadas com 3 tipos de permissões.
A tela de login está funcionando normal e eu consigo acessar as pastas quando eu tenho a permissão para cada usuário.
Quando eu tento acessar uma url sem autorização aparece uma página com a mensagem AccessDeniedException(até ai tudo bem) e então a aplicação não abre mais nenhuma página.

Alguem pode ver esses códigos e me dizer se eu esqueci de alguma coisa? applicationContext.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">

    <bean id="testeSpringDataSource" class="org.springframework.jndi.JndiObjectFactoryBean">
        <property name="jndiName">
            <value>java:comp/env/jdbc/TesteSpringDataSource</value>
        </property>
        <property name="resourceRef">
            <value>true</value>
        </property>
    </bean>

</beans>

applicationContext-security.xml

<?xml version="1.0" encoding="UTF-8"?>

<b:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:b="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
                            http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
                            http://www.springframework.org/schema/security
                            http://www.springframework.org/schema/security/spring-security-3.1.xsd">

    <http>
        <intercept-url pattern="/admin/**" access="ROLE_ADMINISTRADOR" />
        <intercept-url pattern="/vendedor/**" access="ROLE_VENDEDOR" />
        <intercept-url pattern="/usuario/**" access="ROLE_USUARIO" />
        <intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />

        <form-login login-page="/index.xhtml"
            always-use-default-target="true"
            default-target-url="/publico/index.xhtml"
            authentication-failure-url="/index.xhtml?login_error=1" />
        <logout />
        <remember-me />
    </http>
    
    <authentication-manager>
        <authentication-provider>
            <user-service>
                <user name="admin" password="admin" authorities="ROLE_ADMINISTRADOR,ROLE_VENDEDOR,ROLE_USUARIO" />
                <user name="vendedor" password="vendedor" authorities="ROLE_VENDEDOR,ROLE_USUARIO" />
                <user name="usuario" password="usuario" authorities="ROLE_USUARIO" />
            </user-service>
        </authentication-provider>
    </authentication-manager>
</b:beans>

<?xml version='1.0' encoding='UTF-8' ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
      xmlns:h="http://java.sun.com/jsf/html">
    <h:head>
        <title>Facelet Title</title>
    </h:head>
    <h:body>
        <form id="login" method="post" action="#{request.contextPath}/j_spring_security_check">
            Login: <input type="text" name="j_username" />
            <br />
            Senha: <input type="password" name="j_password" />
            <br />
            <input type="checkbox" name="_spring_security_remember_me" />Entrar Automaticamente
            <br />
            <input type="submit" value="Entrar" />
        </form>
        <a href="#{request.contextPath}/j_spring_security_logout">Sair</a>
    </h:body>
</html>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
    <context-param>
        <param-name>javax.faces.PROJECT_STAGE</param-name>
        <param-value>Development</param-value>
    </context-param>
    <servlet>
        <servlet-name>Faces Servlet</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>*.xhtml</url-pattern>
    </servlet-mapping>
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>index.xhtml</welcome-file>
    </welcome-file-list>

    
    <!-- Spring Security -->
    <resource-ref>
        <description>DataSource TesteSpringDataSource</description>
        <res-ref-name>jdbc/TesteSpringDataSource</res-ref-name>
        <res-type>javax.sql.DataSource</res-type>
        <res-auth>Container</res-auth>
    </resource-ref>
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>
           /WEB-INF/applicationContext.xml
           /WEB-INF/applicationContext-security.xml
        </param-value>
    </context-param>

    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>

    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
</web-app>

1 Resposta

Topicos relacionados