Once formLogin is enabled, LoginUrlAuthenticationEntryPoint will become the only default authentication entry point. Http403ForbiddenEntryPoint seems better be included for handling AJAX requests.

https://github.com/spring-projects/spring-security/blob/9de717ac7a4eb78daf5b726d593dc362342a79af/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java#L410-L413

https://github.com/spring-projects/spring-security/blob/9de717ac7a4eb78daf5b726d593dc362342a79af/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java#L246-L267

https://github.com/spring-projects/spring-security/blob/9de717ac7a4eb78daf5b726d593dc362342a79af/config/src/main/java/org/springframework/security/config/annotation/web/configurers/ExceptionHandlingConfigurer.java#L236-L247

Comment From: marcusdacoregio

Hi, @deeaitche. I do not follow exactly what you are requesting. Do you want to invoke an specific entry point based on the request headers?

Comment From: spring-projects-issues

If you would like us to look at this issue, please provide the requested information. If the information is not provided within the next 7 days this issue will be closed.

Comment From: spring-projects-issues

Closing due to lack of requested feedback. If you would like us to look at this issue, please provide the requested information and we will re-open the issue.