Browse Source

SEC-615: Automatically focus on login name HTML element on page load.

Ben Alex 18 years ago
parent
commit
cb765bc34b

+ 2 - 2
core/src/main/java/org/springframework/security/ui/webapp/DefaultLoginPageGeneratingFilter.java

@@ -65,10 +65,10 @@ public class DefaultLoginPageGeneratingFilter extends SpringSecurityFilter {
             }
         }
 
-        return "<html><head><title>Login Page</title></head><body>\n" +
+        return "<html><head><title>Login Page</title></head><body onload='document.f.j_username.focus();'>\n" +
                 (loginError ? ("<font color='red'>Your login attempt was not successful, try again.<br/><br/>Reason: " +
                         errorMsg + "</font>") : "") +
-                " <form action='" + request.getContextPath() + authenticationUrl + "' method='POST'>\n" +
+                " <form name='f' action='" + request.getContextPath() + authenticationUrl + "' method='POST'>\n" +
                 "   <table>\n" +
                 "     <tr><td>User:</td><td><input type='text' name='" + usernameParameter + "'  value='" + lastUser +
                 "'></td></tr>\n" +

+ 2 - 2
samples/contacts/src/main/webapp/acegilogin.jsp

@@ -8,7 +8,7 @@
     <title>Login</title>
   </head>
 
-  <body>
+  <body onload="document.f.j_username.focus();">
     <h1>Login</h1>
 
 	<P>Valid users:
@@ -32,7 +32,7 @@
       </font>
     </c:if>
 
-    <form action="<c:url value='j_spring_security_check'/>" method="POST">
+    <form name="f" action="<c:url value='j_spring_security_check'/>" method="POST">
       <table>
         <tr><td>User:</td><td><input type='text' name='j_username' <c:if test="${not empty param.login_error}">value='<%= session.getAttribute(AuthenticationProcessingFilter.SPRING_SECURITY_LAST_USERNAME_KEY) %>'</c:if>></td></tr>
         <tr><td>Password:</td><td><input type='password' name='j_password'></td></tr>