spring mvc - Use of sec:authorize to load javascript -
i'm making development using spring mvc , thymeleaf.
i'm trying use sec:authorize load javascript. in other words, want script load when user authenticated. here code i'm trying work:
<script src="/js/jquery.min.js" th:src="@{/js/jquery.min.js}"></script> <script src="/js/submit.js" th:src="@{/js/submit.js}"></script> <script src="/js/url.js" th:src="@{/js/url.js}"></script> <!-- admin --> <script sec:authorize="isauthenticated()" src="/js/jquery.simplemodal-1.4.4.js" th:src="@{/js/jquery.simplemodal-1.4.4.js}"></script> <script sec:authorize="isauthenticated()" src="/js/admin.js" th:src="@{/js/admin.js}"></script>
these last 2 resources i'm trying use sec:authorize load seem handle every time load page. valid way use sec:authorize? id isn't, there way this?
isauthenticated() may returning role_anonymous legit role, hence why returning true , rendering script.
here explanation why user can authenticated anonymous (which in turn breaks logic) why 'anonymoususer' authenticated in spring security?
to circumvent , advise want user specific access there need roles such role_user, role_admin.
hope helps.
Comments
Post a Comment