0

第1步：在Spring Mvc中使用ajax提交表单，工作正常。

第2步：将相同的spring MVC项目与spring security集成（在spring mvc中没有ajax表单提交）也可以正常工作。

但是现在当尝试集成相同的（step2 项目）spring MVC + Spring security 并且还为 spring mvc 表单引入 ajax 表单提交时，最终在浏览器上出现错误 405

405: 方法不允许，请求方法 'POST' 不支持

   **General**
    Request URL:http://localhost:8080/Springmvc-ajax-security/submitForm.web
    Request Method:POST
    Status Code:405 Method Not Allowed
    Remote Address:[::1]:8080

**Response header**
Allow:GET
Cache-Control:no-cache, no-store, max-age=0, must-revalidate
Content-Length:1085
Content-Type:text/html
Date:Sat, 26 Mar 2016 12:12:00 GMT
Expires:0
Pragma:no-cache
Server:Apache-Coyote/1.1
X-Content-Type-Options:nosniff
X-Frame-Options:DENY
X-XSS-Protection:1; mode=block



**Request header**
Accept:application/json, text/javascript, */*; q=0.01
Accept-Encoding:gzip, deflate
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Content-Length:117
Content-Type:application/json; charset=UTF-8
Cookie:JSESSIONID=019622188DB97DEF5F2D1AE716032C41
Host:localhost:8080
Origin:http://localhost:8080
Referer:http://localhost:8080/Springmvc-ajax-security/helloWorld.web
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36
X-Requested-With:XMLHttpRequest

**Request payload**
{"studentName":"Noorus","studentBranch":"CS","studentDept":"computer","_csrf":"b68fbffe-d7a0-40eb-9edc-74d0f6408556"}

StudentController.java

@RequestMapping(value="/submitForm.web", method = RequestMethod.POST)
    public @ResponseBody Student  submittedFromData(@RequestBody Student student, HttpServletRequest request) { 
        return student;
    }

学生.jsp

    <body>

    <form:form id="submitForm" action="submitForm.web" method="post"
        commandName="student">

    <fieldset style="width: 300px;">
        <legend>Student details</legend>
        <ol>
            <li><label for=studentName>Student Name</label> <form:input
                    path="studentName" name="studentName" type="text"
                    placeholder="First and last name" /></li>
            <li>
                <p>
                    <label for=studentBranch>Student Branch</label>
                    <form:input path="studentBranch" name="studentBranch" type="text" />
                </p>
            </li>
            <li>
                <p>
                    <label for=studentDept>Student Department</label>
                    <form:input path="studentDept" name="studentDept" type="text"
                        required="true" />
                </p>
            </li>
        </ol>
    </fieldset>

    <fieldset style="width: 300px;">
        <input id="submitId" type="submit" value="Submit Form">
    </fieldset>
</form:form>
</body>

<!-- <script type="text/javascript" src="resources/js/submit.js"></script> -->
<script type="text/javascript">
$(document).ready(function() {

    alert("welcome to js page");
    $('#submitForm').submit(function(e) {
        var frm = $('#submitForm');
        e.preventDefault();

        var data = {}
        var Form = this;

        //Gather Data also remove undefined keys(buttons)
        $.each(this, function(i, v){
            var input = $(v);
            data[input.attr("name")] = input.val();
            delete data["undefined"];
        });
        $.ajax({
            contentType : 'application/json; charset=utf-8',
            type: frm.attr('method'),
            url: frm.attr('action'),
            dataType : 'json',
            data : JSON.stringify(data),
            success : function(callback){
                alert("Response: Name: "+callback.studentName+"  Branch: "+callback.studentBranch+"  Department: "+callback.studentDept);
                $(this).html("Success!");
            },
            error : function(){
                $(this).html("Error!");
            }
        });
    });
});

</script>

学生.java

@Entity
@Table(name="student")
public class Student implements Serializable{

    private static final long serialVersionUID = 1L;

    @Id
    @GeneratedValue(strategy=GenerationType.AUTO)
    @Column(name="studentId")
    Long studentId;

    @Column(name="studentName")
    String studentName;

    @Column(name="studentDept")
    String studentDept;

    @Column(name="studentBranch")
    String studentBranch;   

    public Student() {
        super();
    }

  getter & setter
}

提前致谢

4

3 回答 3

0

您的有效负载正在发送 _csrf 这就像您的对象中的额外数据。{"studentName":"Noorus","studentBranch":"CS","studentDept":"computer", "_csrf":"b68fbffe-d7a0-40eb- 9edc-74d0f6408556" }

但是如果你看到你的模型类它没有 _csrf 字段。这可能是请求正在寻找完全匹配方法但没有找到的原因，所以它显示 405。

于 2016-03-27T07:14:23.627 回答
0

我有一个类似的问题，我将 Ajax 与 Spring Security 一起使用，在我的情况下，禁用 csrf 对我的安全配置有效。

   @Configuration
   public class SecurityConfiguration extends WebSecurityConfigurerAdapter   {

   @Override
   protected void configure(HttpSecurity httpSecurity) throws Exception {
   httpSecurity.csrf().disable();

   }
}
于 2016-03-27T03:47:21.020 回答
-1

@RequestMapping(value="/submitForm.web", method = RequestMethod.GET)

你不是说method = RequestMethod.POST

于 2016-03-26T12:42:07.257 回答