protected String doLogin() {
String username = get("username");
String password = get("password");
if (StringUtils.isBlank(username) || StringUtils.isBlank(password)) { return "failure"; }
username = username.trim();
UsernamePasswordAuthentication auth= new UsernamePasswordAuthentication(username,
password);
auth.setDetails(authenticationDetailsSource.buildDetails(request));
Authentication authRequest =auth;
try {
authRequest= authenticationManager.authenticate(authRequest);
sessionStrategy.onAuthentication(authRequest, request, null);
SecurityContextHolder.getContext().setAuthentication(authRequest);