formLogin loginProcessingUrl Failure in spring-security-config

Products

• VMware Tanzu Spring Essentials

Issue/Introduction

- POST requests to the configured loginProcessingUrl (e.g., /login or /j_spring_security_check) return a 404 Not Found error.

- The application logs may indicate that the requested resource is not available despite being defined in the HttpSecurity configuration.

- Authentication fails to trigger, and the request bypasses the security filter chain to reach the DispatcherServlet

Environment

Spring Security 7.0.5

Cause

A regression in the configuration DSL within the spring-security-config module prevents the proper registration of the UsernamePasswordAuthenticationFilter mapping. Specifically, the loginProcessingUrl defined in the formLogin configuration is not correctly bound to the internal RequestMatcher, causing the security filter to ignore the login attempt.

Resolution

This issue remains open and is currently being triaged by the engineering team