Add Custom Pages Sample

jzheaux · jzheaux · commit 4c5ff612a8da · 2025-09-04T15:55:50.000-06:00
diff --git a/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/java/org/example/magiclink/CustomPagesSecurityConfig.java b/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/java/org/example/magiclink/CustomPagesSecurityConfig.java
@@ -0,0 +1,46 @@
+package org.example.magiclink;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Profile;
+import org.springframework.security.config.Customizer;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+
+@Profile("custom-pages")
+@Configuration(proxyBeanMethods = false)
+public class CustomPagesSecurityConfig {
+
+	@Controller
+	@Profile("custom-pages")
+	static class LoginController {
+		@GetMapping("/login/form")
+		public String login() {
+			return "login";
+		}
+
+		@GetMapping("/login/ott")
+		public String ott() {
+			return "ott";
+		}
+	}
+
+	@Bean
+	public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+		// @formatter:off
+		http
+			.authorizeHttpRequests((authz) -> authz.anyRequest().authenticated())
+			.formLogin((form) -> form
+				.loginPage("/login/form").permitAll()
+				.factor(Customizer.withDefaults())
+			)
+			.oneTimeTokenLogin((ott) -> ott
+				.loginPage("/login/ott").permitAll()
+				.factor(Customizer.withDefaults())
+			);
+		// @formatter:on
+		return http.build();
+	}
+}
diff --git a/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/resources/templates/login.html b/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/resources/templates/login.html
@@ -6,11 +6,11 @@
     <meta name="description" content="">
     <meta name="author" content="">
     <title>Please sign in</title>
-    <link href="/css/default-ui.css" rel="stylesheet" />
+    <link href="/default-ui.css" rel="stylesheet" />
 </head>
 <body>
 <div class="content">
-    <form class="login-form" method="post" th:action="@{/login}">
+    <form class="login-form" method="post" th:action="@{/login/form}">
         <h2>Please sign in</h2>
 
         <p>
diff --git a/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/resources/templates/ott.html b/servlet/spring-boot/java/authentication/mfa/formLogin+ott/src/main/resources/templates/ott.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html xmlns:th="https://www.thymeleaf.org" lang="en">
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    <meta name="description" content="">
+    <meta name="author" content="">
+    <title>Please sign in</title>
+    <link href="/default-ui.css" rel="stylesheet" />
+</head>
+<body>
+<div class="content">
+    <form class="login-form" method="post" th:action="@{/login/ott}">
+        <h2>Please supply a token</h2>
+
+        <p>
+            <label for="token" class="screenreader">Token</label>
+            <input type="text" id="token" name="token" placeholder="Token" required autofocus>
+        </p>
+
+        <button type="submit" class="primary">Use this Token</button>
+    </form>
+</div>
+</body>
+</html>
