How to correctly update the login date time after successful login with Spring security?

Question

I'm using Spring 3.2.0 and the same version of Spring security. On successful login, a user is redirected to one of the protected pages as follows. ``` public final class LoginSuccessHandler implements AuthenticationSuccessHandler { @Override public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException { Set<String> roles = AuthorityUtils.authorityListToSet(authentication.getAuthorities()); if (roles.contains("ROLE_ADMIN")) { response.sendRedirect("admin_side/Home.htm"); return; } } } ``` I'm using Hibernate. How can I update the login date-time (Last Login) in the database on successful login? I have a submit button on the login page whose `POST` request doesn't seem to map to a method in its corresponding login controller. The login form's action is actually mapped to the Servlet - `j_spring_security_check`. The entire `spring-security.xml` file is as follows, if it is required. ```…

Accepted Answer

An other way is to register an handler for the `AuthenticationSuccessEvent`.

```
    @Service
    public class UserService implements
                             ApplicationListener<AuthenticationSuccessEvent> {

@Override
        public void onApplicationEvent(AuthenticationSuccessEvent event) {
           String userName = ((UserDetails) event.getAuthentication().
                                                  getPrincipal()).getUsername();
           User user = this.userDao.findByLogin(userName);
           user.setLastLoginDate(new Date());
        }
   }
```

How to correctly update the login date time after successful login with Spring security?

Solution

Problem

Related problems