This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 6.3.4!

Testing Form Based Authentication

You can easily create a request to test a form based authentication using Spring Security’s testing support. For example, the following formLogin RequestPostProcessor will submit a POST to "/login" with the username "user", the password "password", and a valid CSRF token:

  • Java

  • Kotlin

mvc
	.perform(formLogin())
mvc
	.perform(formLogin())

It is easy to customize the request. For example, the following will submit a POST to "/auth" with the username "admin", the password "pass", and a valid CSRF token:

  • Java

  • Kotlin

mvc
	.perform(formLogin("/auth").user("admin").password("pass"))
mvc
    .perform(formLogin("/auth").user("admin").password("pass"))

We can also customize the parameters names that the username and password are included on. For example, this is the above request modified to include the username on the HTTP parameter "u" and the password on the HTTP parameter "p".

  • Java

  • Kotlin

mvc
	.perform(formLogin("/auth").user("u","admin").password("p","pass"))
mvc
    .perform(formLogin("/auth").user("u","admin").password("p","pass"))