Custom Spring Security Web failure handler..
/**
* @author Wasim Ansari
*
*/
<!-- custom form security developed using spring -->
<security:http auto-config="true" use-expressions="true" >
<!-- When we working on ip address validation through role at that time you can use hasIpAddress validation with access security interceptor -->
<!-- <security:intercept-url pattern="/successurl/**" access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER') and hasIpAddress('127.0.0.1')" /> -->
<security:intercept-url pattern="/successurl/**" access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER')" />
<security:form-login login-page="/login" always-use-default-target="true"
authentication-success-handler-ref="customAuthSuccessHandler" authentication-failure-handler-ref="customAuthFailureHandler" />
<security:session-management invalid-session-url="/loginfailed" >
<!-- <security:concurrency-control expired-url="/loginfailed" max-sessions="1" error-if-maximum-exceeded="true" /> -->
<security:concurrency-control expired-url="/loginfailed" />
</security:session-management>
<security:logout invalidate-session="true" success-handler-ref="customLogoutSuccessHandler" delete-cookies="JSESSIONID" />
<!-- by default , on back click link session will be destroyed.. -->
<!-- <security:logout invalidate-session="true" success-handler-ref="customLogoutSuccessHandler" delete-cookies="JSESSIONID" /> -->
</security:http>
Spring security - Bean dependencies .
/**
* @author Wasim Ansari
*
*/
<!-- custom form security developed using spring -->
<security:http auto-config="true" use-expressions="true" >
<!-- When we working on ip address validation through role at that time you can use hasIpAddress validation with access security interceptor -->
<!-- <security:intercept-url pattern="/successurl/**" access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER') and hasIpAddress('127.0.0.1')" /> -->
<security:intercept-url pattern="/successurl/**" access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER')" />
<security:form-login login-page="/login" always-use-default-target="true"
authentication-success-handler-ref="customAuthSuccessHandler" authentication-failure-handler-ref="customAuthFailureHandler" />
<security:session-management invalid-session-url="/loginfailed" >
<!-- <security:concurrency-control expired-url="/loginfailed" max-sessions="1" error-if-maximum-exceeded="true" /> -->
<security:concurrency-control expired-url="/loginfailed" />
</security:session-management>
<security:logout invalidate-session="true" success-handler-ref="customLogoutSuccessHandler" delete-cookies="JSESSIONID" />
<!-- by default , on back click link session will be destroyed.. -->
<!-- <security:logout invalidate-session="true" success-handler-ref="customLogoutSuccessHandler" delete-cookies="JSESSIONID" /> -->
</security:http>
Spring security - Bean dependencies .