Spring Security Database Authentication Example JavaConfig + XML

In the Spring Security Database Authentication Example, we will build a simple Spring MVC Hello World application and build our own login form for our Spring Security application which performs Authentication and Authorization from the database.

In our Spring MVC application the home page will be accessible to everyone, and we will be having admin page which will be accessible to only to the user with admin rights. When the user tries to access the admin page the user will be redirected to the custom login form which we build and asked to log in, if the credentials entered matches the admin privilege then only the user will be allowed to view the admin page.

Creating table

Create USERS and USER_ROLES Table, simply Copy and Paste the following SQL query in the query editor to get the table created.

CREATE TABLE "USERS" 
( 
    "USERNAME" VARCHAR2(255 CHAR) NOT NULL ENABLE, 
    "PASSWORD" VARCHAR2(255 CHAR) NOT NULL ENABLE, 
    PRIMARY KEY ("USERNAME")
);
  
CREATE TABLE "USER_ROLES" 
( 
    "ROLE" VARCHAR2(255 CHAR) NOT NULL ENABLE, 
    "USERNAME" VARCHAR2(255 CHAR) NOT NULL ENABLE, 
    PRIMARY KEY ("ROLE"),
    CONSTRAINT fk_username FOREIGN KEY ("USERNAME") REFERENCES USERS("USERNAME")
);

insert into USERS (USERNAME,PASSWORD) values ('admin', 'password');
insert into USER_ROLES (ROLE, USERNAME) values ('ROLE_ADMIN','admin');

Folder Structure:

Create a simple Maven Project “SpringSecurityDatabase” and create a package for our source files “com.javainterviewpoint” under src/main/java

Now add the following dependency in the POM.xml

<project xmlns="http://maven.apache.org/POM/4.0.0"	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"	
	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0	http://maven.apache.org/maven-v4_0_0.xsd">
	<modelVersion>4.0.0</modelVersion>
	<groupId>com.javainterviewpoint</groupId>
	<artifactId>SpringSecurtiyDatabase</artifactId>
	<packaging>war</packaging>
	<version>0.0.1-SNAPSHOT</version>
	<name>SpringSecurtiyDatabase Maven Webapp</name>
	<url>http://maven.apache.org</url>

	<properties>
		<spring.version>4.3.7.RELEASE</spring.version>
		<security.version>4.0.3.RELEASE</security.version>
	</properties>

	<dependencies>
		<dependency>
			<groupId>junit</groupId>
			<artifactId>junit</artifactId>
			<version>3.8.1</version>
			<scope>test</scope>
		</dependency>
		<dependency>
			<groupId>javax.servlet</groupId>
			<artifactId>javax.servlet-api</artifactId>
			<version>3.1.0</version>
		</dependency>

		<dependency>
			<groupId>org.springframework</groupId>
			<artifactId>spring-core</artifactId>
			<version>${spring.version}</version>
		</dependency>
		<dependency>
			<groupId>org.springframework</groupId>
			<artifactId>spring-webmvc</artifactId>
			<version>${spring.version}</version>
		</dependency>
		<!-- Spring Security -->
		<dependency>
			<groupId>org.springframework.security</groupId>
			<artifactId>spring-security-core</artifactId>
			<version>${security.version}</version>
		</dependency>
		<dependency>
			<groupId>org.springframework.security</groupId>
			<artifactId>spring-security-web</artifactId>
			<version>${security.version}</version>
		</dependency>
		<dependency>
			<groupId>org.springframework.security</groupId>
			<artifactId>spring-security-config</artifactId>
			<version>${security.version}</version>
		</dependency>
		
		 <!-- Spring JDBC dependency -->
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-jdbc</artifactId>
            <version>${security.version}</version>
        </dependency>
		<dependency>
			<groupId>jstl</groupId>
			<artifactId>jstl</artifactId>
			<version>1.2</version>
		</dependency>
		<!-- Oracle dependency -->
		 <dependency>
			<groupId>com.oracle</groupId>
			<artifactId>ojdbc14</artifactId>
			<version>11.2.0</version>
		</dependency>
	</dependencies>
	
	<build>
		<finalName>SpringSecurtiyDatabase</finalName>
		 <plugins>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-compiler-plugin</artifactId>
            <version>3.6.1</version>
            <configuration>
                <source>1.8</source>
                <target>1.8</target>
            </configuration>
        </plugin>
    </plugins>
	</build>
</project>

Create the Java class HelloController.java under com.javainterviewpoint folder.
Place the SpringConfig-servlet.xml,SpringSecurity.xml and web.xml under the WEB-INF directory
View files login.jsp, and admin.jsp are put under the sub directory under WEB-INF/Jsp, index.jsp under webapp directory