Lesson 1: A Simple Remember Me Flow
1. Main Goal
The focus here is to implement a very simple remember-me flow for our login page.
2. Lesson Notes
If you're using the git repository to get the project - you should be using the module3 branch.
The relevant module you need to import when you're starting with this lesson is: lssc-module3/m3-lesson1
If you want to skip and see the complete implementation, feel free to jump ahead and import: lssc-module3/m3-lesson2
The credentials used in the code of this lesson are: [email protected]/pass (data.sql).
2.1. Basic Remember-Me
First, we’re going to enable the basic remember-me functionality in the security config:
.rememberMe().key("lssAppKey")
We are then going to add the remember-me checkbox on the login page:
<input id="remember" type="checkbox" name="remember-me" value="true" />
Finally, we are going to test by following two scenarios:
Scenario 1:
- log in without remember-me
- remove the JSESSIONID cookie manually
- refresh the page => we should be redirected to login
Scenario 2:
- log in with remember-me
- remove the JSESSIONID cookie manually
- refresh the page => we should now remain logged in
2.2. Upgrade Notes
As we've mentioned in the previous lessons, in Spring Boot 2 we have to specify the password encryption. This means that we should also set it explicitly when configuring the authentication manager:
@Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
}