jsf commandButton managedBean 操作重定向到 404 页面

Question

我有我的 ManagedBean TodoService.java

package com.medkhelifi.tutorials.todolist.services;

import com.medkhelifi.tutorials.todolist.models.dao.ITodoDao;
import com.medkhelifi.tutorials.todolist.models.entities.Todo;

import javax.faces.bean.ManagedBean;
import javax.faces.bean.ManagedProperty;
import javax.faces.bean.RequestScoped;
import javax.faces.bean.SessionScoped;

@ManagedBean
@RequestScoped
public class TodoService implements ITodoService {

    @ManagedProperty(value = "ITodoDao")
    private ITodoDao ITodoDao;

    @Override
    public void addTodo(Todo todo) {
        ITodoDao.addTodo(todo);
    }

    public void setITodoDao(ITodoDao ITodoDao) {
        this.ITodoDao = ITodoDao;
    }
}

我有我的表格来添加新数据 index.xhtml

   <!-- extra code coes here -->     
   <b:column colMd="6">
            <div class="todolist not-done">
                <h1>Todos</h1>
                <h:form>
                    <b:inputText type="text" class="form-control add-todo" placeholder="Todo Title"/>
                    <b:inputTextarea type="text" placeholder="Description" />
                    <b:dateTimePicker placeholder="todo Date" format="YYYY-MM-DD HH:mm:ss"/>
                    <h:commandButton action="#{todoService.addTodo(null)}" class="btn btn-success" value="Add"/>
                </h:form>

                <hr/>
                <ul class="list-unstyled" >
                    <ui:repeat value="#{TodoDao.getCurrentUserTodos()}" var="todo"  >
                        <h:panelGroup rendered="#{!todo.done}">
                            <li class="ui-state-default">
                                <div class="checkbox">
                                    <label><input type="checkbox" value="" />#{todo.title}</label>
                                </div>
                            </li>
                        </h:panelGroup>
                    </ui:repeat>
                </ul>
                <div class="todo-footer">
                    <strong><span class="count-todos"/></strong> Items Left
                </div>
            </div>
        </b:column>
  <!-- extra code coes here -->

当我执行添加按钮时，我被重定向到具有 404 状态的同一页面。还有我的web.xml

<?xml version="1.0" encoding="UTF-8" ?>

<web-app    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xmlns="http://java.sun.com/xml/ns/javaee"
            xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
            version="3.0">

    <!-- DEFINE APPLICATION ENVIRONMENT  -->
    <context-param>
        <param-name>javax.faces.PROJECT_STAGE</param-name>
        <param-value>Development</param-value>
    </context-param>

    <!-- DEFINE JSF SERVLET MAPPING   -->
    <servlet>
        <servlet-name>FACES SERVLET</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>FACES SERVLET</servlet-name>
        <url-pattern>*.xhtml</url-pattern>
    </servlet-mapping>

    <!-- DEFINE WELCOME PAGE -->
    <welcome-file-list>
        <welcome-file>index.xhtml</welcome-file>
    </welcome-file-list>

    <!--    SPRING SERVLETS -->

    <servlet>
        <servlet-name>dispatcher-servlet</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <init-param>
            <param-name>contextConfigLocation</param-name>
            <param-value>classpath:/conf/applicationContext.xml</param-value>
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>dispatcher-servlet</servlet-name>
        <url-pattern>/</url-pattern>
    </servlet-mapping>

    <!--    SPRING CONTEXT -->
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>classpath*:conf/applicationContext.xml</param-value>
    </context-param>


    <!--        SPRING SECURITY FILTER -->
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
        <!-- Add this dispatcher to handle /j_spring_security_check url -->
        <dispatcher>REQUEST</dispatcher>
        <dispatcher>FORWARD</dispatcher>
    </filter-mapping>

</web-app>

我也使用 Spring 安全性： applicationContext-security.xml

<beans:beans xmlns="http://www.springframework.org/schema/security"
             xmlns:beans="http://www.springframework.org/schema/beans"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
    http://www.springframework.org/schema/security
    http://www.springframework.org/schema/security/spring-security-4.0.xsd">

    <http auto-config="true">
        <intercept-url pattern="/login*" access="permitAll()"/>
        <intercept-url pattern="/javax.faces.resource/**" access="permitAll()"/>

        <intercept-url pattern="/**" access="isAuthenticated()" />

        <!-- access denied page -->
        <access-denied-handler error-page="/403" />
        <form-login
                login-page="/login.xhtml"
                default-target-url="/index.xhtml"
                authentication-failure-url="/login.xhtml?error"
                login-processing-url="/j_spring_security_check"
                username-parameter="input_username"
                password-parameter="input_password" />
        <logout
                logout-success-url="/login.xhtml"
        />
        <!-- enable csrf protection -->
        <csrf />
    </http>
    <authentication-manager>
        <authentication-provider user-service-ref="myUserDetailsService">
            <password-encoder hash="bcrypt"/>
        </authentication-provider>
    </authentication-manager>
</beans:beans>

而且当我调试时，TodoService.addTodo 方法从未被调用，我希望我能很好地解释我的问题。有我的堆栈： Spring 4.2.2-决赛 JSF 2.2.17

Answer 1

经过几个小时的搜索，我发现了问题所在：我错过了将 csrf 安全隐藏输入添加到我的表单，因为我在 Spring 安全性中使用了 csrf 保护。

index.xhtml

   <!-- extra code coes here -->     
   <b:column colMd="6">
            <div class="todolist not-done">
                <h1>Todos</h1>
                <h:form>
                    <b:inputText type="text" class="form-control add-todo" placeholder="Todo Title"/>
                    <b:inputTextarea type="text" placeholder="Description" />
                    <b:dateTimePicker placeholder="todo Date" format="YYYY-MM-DD HH:mm:ss"/>
                    <!-- I missed to add this line -->
                    <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}" />
                    <h:commandButton action="#{todoService.addTodo(null)}" class="btn btn-success" value="Add"/>
                </h:form>

                <hr/>
                <ul class="list-unstyled" >
                    <ui:repeat value="#{TodoDao.getCurrentUserTodos()}" var="todo"  >
                        <h:panelGroup rendered="#{!todo.done}">
                            <li class="ui-state-default">
                                <div class="checkbox">
                                    <label><input type="checkbox" value="" />#{todo.title}</label>
                                </div>
                            </li>
                        </h:panelGroup>
                    </ui:repeat>
                </ul>
                <div class="todo-footer">
                    <strong><span class="count-todos"/></strong> Items Left
                </div>
            </div>
        </b:column>
  <!-- extra code coes here -->

jsf commandButton managedBean 操作重定向到 404 页面

jsf commandButton managedBean action redirect to 404 page

jsf

spring

managed-bean