Html css链接标记中SAMLRequest 403访问被拒绝_Html_Css_Spring_Jsp_Spring Security

Html css链接标记中SAMLRequest 403访问被拒绝

html css spring jsp spring-security

Html css链接标记中SAMLRequest 403访问被拒绝,html,css,spring,jsp,spring-security,Html,Css,Spring,Jsp,Spring Security,我在SpringMVC应用程序的jsp页面中添加链接标记时遇到问题此jsp页面用于在执行SAMLRequest后处理“拒绝访问”。但是，我的链接标记如何在jsp中获得SAMLRequest而不是CSS文本。有人能帮我解决这个问题吗我的JSP <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%> <html> <head> <link rel="stylesheet" h

我在SpringMVC应用程序的jsp页面中添加链接标记时遇到问题

此jsp页面用于在执行SAMLRequest后处理“拒绝访问”。但是，我的链接标记如何在jsp中获得SAMLRequest而不是CSS文本。有人能帮我解决这个问题吗

我的JSP

<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<html>
<head>
    <link rel="stylesheet" href="css/temp.css" type="text/css">
</head>
<body>
    <div class="forbidden">
        <div class="repeat-image">
            <div class="main-image image403">
                <div class="text-block">
                    <p class="status">403</p>
                    <p class="title">Access Denied</p>
                    <p class="message">You currently do not have permission to access this page.  Want access?</p>

                    <div class="instructions">
                        Instructions to request via Self Service UAA<br />
                        <ul>
                            <li>In SSUAA --> Search for "Access"</li>
                            <li>Click "Next" to confirm requests</li>
                        </ul>
                        You will receive an email confirmation and status updates for your request
                    </div>
                    <div class="message">
                        Go ahead and request it <a href="url" target="_blank">here &raquo; </a>
                    </div>
                </div>
            </div>
        </div>
    </div>
</body>
</html>

最后，我找到了解决上述问题的方法。我的spring-web-servlet.xml中缺少

感谢@bluro224抽出您的时间。

最后，我找到了上述问题的解决方案。我的spring-web-servlet.xml中缺少

感谢@bluro224占用您的时间。

请发布css/jsp的目录结构以及安全配置中定义如何应用过滤器以及允许哪些目录的部分。@blur0224-我已根据您的评论更新了我的帖子。非常感谢。SAML安全配置中的某些内容错误地保护了URL。如果可以，可以发布完整的SAML安全配置吗？另外，将spring日志记录转到debug，并在加载页面时发布相应的日志输出块。应该有一些输出显示请求被重定向。是的，我已经更新了@请发布css/jsp的目录结构以及安全配置中定义如何应用过滤器以及允许哪些目录的部分。@blur0224-我已根据您的评论更新了我的帖子。非常感谢。SAML安全配置中的某些内容错误地保护了URL。如果可以，可以发布完整的SAML安全配置吗？另外，将spring日志记录转到debug，并在加载页面时发布相应的日志输出块。应该有一些输出显示请求被重定向。是的，我已经更新了@blur0224

<html>
<head>
<link type="text/css" href="css/temp.css" rel="stylesheet">
<HTML><HEAD><TITLE>HTTP Post Binding (Request)</TITLE></HEAD><BODY Onload="document.forms[0].submit()"><FORM METHOD="POST" ACTION="/idp/SSO.saml2"><INPUT TYPE="HIDDEN" NAME="SAMLRequest" VALUE="PHNhbWxwOkF1dGhuUmVxdWVzdCB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnBm5hbWVpZC1mb3JtYXQ6dHJhbnNpZW50IiBBbGxvd0NyZWF0ZT0idHJ1ZSIvPjwvc2FtbHA6QXV0aG5SZXF1ZXN0Pg=="/><INPUT TYPE="HIDDEN" NAME="RelayState" VALUE="https://localhost:8080/"/></FORM></BODY></HTML>
</link>
</head>
<body>
</html>

<security:http pattern="/css/**" security="none" />
<security:http pattern="/images/**" security="none" />
<security:http pattern="/403" security="none" /> 

<security:http entry-point-ref="entryPoint"
    use-expressions="true">
    <security:intercept-url pattern="/**"
        access="isAuthenticated()" />
    <security:custom-filter position="CAS_FILTER"
        ref="authenticationFilter" />
    <security:logout logout-url="/signout"
        logout-success-url="/" />
    <security:csrf disabled="true"/>
</security:http>

<bean id="authenticationFilter"
    class="com.espn.ese.ais.vod.ams.security.picketlink.PicketLinkAuthenticationFilter"
    lazy-init="true">
    <constructor-arg value="${picketlink.filter.processes.url}" />
    <property name="authenticationManager" ref="authenticationManager" />
    <property name="serviceUrl" value="${picketlink.service.url}" />
    <property name="authenticationFailureHandler">
        <bean class="org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler">
            <constructor-arg value="/403" />
        </bean>
    </property>
</bean>
<security:authentication-manager alias="authenticationManager">
    <security:authentication-provider
        ref="authenticationProvider" />
</security:authentication-manager>

<bean id="authenticationProvider"
    class="com.espn.ese.ais.vod.ams.security.picketlink.PicketLinkAuthenticationProvider"
    lazy-init="true">
    <property name="authenticationUserDetailsService">
        <bean
            class="com.espn.ese.ais.vod.ams.security.picketlink.PicketLinkAuthenticationUserDetailsService">
            <constructor-arg ref="userDetailsService" />
        </bean>
    </property>
</bean>

<bean id="userDetailsService"
    class="com.espn.ese.ais.vod.ams.security.TestUserDetailsService"
    lazy-init="true" />

2016-07-28 10:19:18,023 WARN  [org.springframework.web.servlet.PageNotFound] (http-/0.0.0.0:8080-1) No mapping found for HTTP request with URI [/{contextroot}/css/temp.css] in DispatcherServlet with name 'spring-web'