CharacterEncodingFilter don’t work together with Spring Security 3.2.0

by

We need to add CharacterEncodingFilter before filters who read request properties for the first time. There is securityFilterChain (stands second. after metrica filter) and we can add our filter inside it. The first filter (inside security chain) who reads properties is CsrfFilter, so we place CharacterEncodingFilter before it.

The short solution is:

@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        CharacterEncodingFilter filter = new CharacterEncodingFilter();
        filter.setEncoding("UTF-8");
        filter.setForceEncoding(true);
        http.addFilterBefore(filter,CsrfFilter.class);
        //rest of your code   
    }
//rest of your code
}

More Related Contents:

  1. Serving static web resources in Spring Boot & Spring Security application
  2. When to use Spring Security`s antMatcher()?
  3. Spring 5.0.3 RequestRejectedException: The request was rejected because the URL was not normalized
  4. StrictHttpFirewall in spring security 4.2 vs spring MVC @MatrixVariable
  5. Spring Security : Multiple HTTP Config not working
  6. How to use Session attributes in Spring-mvc
  7. Spring Boot Security CORS
  8. Handle spring security authentication exceptions with @ExceptionHandler
  9. Neither BindingResult nor plain target object for bean name available as request attribute [duplicate]
  10. Spring 3 MVC accessing HttpRequest from controller
  11. Sending Multipart File as POST parameters with RestTemplate requests
  12. Difference between Role and GrantedAuthority in Spring Security
  13. Disable Spring Security for OPTIONS Http Method
  14. Java Spring Security config – multiple authentication providers
  15. Difference between Request MVC and Component MVC [closed]
  16. RESTful Authentication via Spring
  17. HttpSecurity, WebSecurity and AuthenticationManagerBuilder
  18. Spring Security configuration: HTTP 403 error
  19. Spring webSecurity.ignoring() doesn’t ignore custom filter
  20. How do I remove the ROLE_ prefix from Spring Security with JavaConfig?
  21. Spring + Web MVC: dispatcher-servlet.xml vs. applicationContext.xml (plus shared security)
  22. Load different application.yml in SpringBoot Test
  23. Difference between JAX-RS and Spring Rest
  24. How to convert byte array to MultipartFile
  25. An Authentication object was not found in the SecurityContext – Spring 3.2.2
  26. Spring security added prefix “ROLE_” to all roles name?
  27. How to use “map.get(key)” in Thymeleaf – Broadleaf Ecom
  28. Why this Spring application with java-based configuration don’t work properly
  29. Http Post with request content type form not working in Spring MVC 3
  30. Does Spring @RequestBody support the GET method?

Leave a Comment