Computer scienceBackendKtorKtor PluginsAuthentication

Basic And Form Authentication

Form authorization

Report a typo

Consider the Form authorization we implemented in the topic. When we set up the Form authentication, we specified a redirect to the form page in the challenge method. What happens if we leave it blank?

install(Authentication) {
    form("myFormAuth") {
        userParamName = "username"
        passwordParamName = "password"
        validate { credentials ->
            if (credentials.name == "Admin" && credentials.password == "2425") {
                UserIdPrincipal(credentials.name)
            } else {
                null
            }
        }
        challenge {
             //call.respondRedirect("/auth")
        }
    }
}

Open the IDE and check the result yourself.

Select one or more options from the list

If you send the wrong credentials through the form using the post method, you will be redirected to /auth.

If you send an invalid credentials (for example, Alibaba 1234) through the form using the post method, the page displays: "Protected content! Name: null"

If you send an invalid credentials (for example, Alibaba 1234) through the form using the post method, the page displays: "Protected content! Name: Alibaba"

When you access /page with the get method, it redirects to /auth.

If you send the wrong credentials through the form using the post method, there is no redirection back to /auth.

When accessing the /page using the get method, there is no redirection.

___

Create a free account to access the full topic