From 2a23f3b36cce487365e36e0e8e3208dd9de5bcf4 Mon Sep 17 00:00:00 2001
From: Anantha Krishnan <ananthakrishnanj2001@gmail.com>
Date: Tue, 3 Mar 2026 08:13:42 +0530
Subject: [PATCH] fix: restore native form submission for OTT login

Signed-off-by: Anantha Krishnan <ananthakrishnanj2001@gmail.com>
---
 .../configurers/ott/OneTimeTokenLoginConfigurerTests.java   | 2 +-
 .../authentication/ui/DefaultLoginPageGeneratingFilter.java | 2 +-
 .../DefaultLoginPageGeneratingFilterTests.java              | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/config/src/test/java/org/springframework/security/config/annotation/web/configurers/ott/OneTimeTokenLoginConfigurerTests.java b/config/src/test/java/org/springframework/security/config/annotation/web/configurers/ott/OneTimeTokenLoginConfigurerTests.java
index f12d40cfc3..5d21957d97 100644
--- a/config/src/test/java/org/springframework/security/config/annotation/web/configurers/ott/OneTimeTokenLoginConfigurerTests.java
+++ b/config/src/test/java/org/springframework/security/config/annotation/web/configurers/ott/OneTimeTokenLoginConfigurerTests.java
@@ -177,7 +177,7 @@ public class OneTimeTokenLoginConfigurerTests {
 						          <input type="text" id="ott-username" name="username" placeholder="Username" required>
 						        </p>
 						<input name="_csrf" type="hidden" value="%s" />
-						        <button class="primary" type="submit" form="ott-form">Send Token</button>
+						        <button class="primary" type="submit">Send Token</button>
 						      </form>
 
 
diff --git a/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultLoginPageGeneratingFilter.java b/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultLoginPageGeneratingFilter.java
index 0a367da71a..45f2ce23c2 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultLoginPageGeneratingFilter.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultLoginPageGeneratingFilter.java
@@ -604,7 +604,7 @@ public class DefaultLoginPageGeneratingFilter extends GenericFilterBean {
 			          {{usernameInput}}
 			        </p>
 			{{hiddenInputs}}
-			        <button class="primary" type="submit" form="ott-form">Send Token</button>
+			        <button class="primary" type="submit">Send Token</button>
 			      </form>
 			""";
 
diff --git a/web/src/test/java/org/springframework/security/web/authentication/DefaultLoginPageGeneratingFilterTests.java b/web/src/test/java/org/springframework/security/web/authentication/DefaultLoginPageGeneratingFilterTests.java
index 1bb07477dd..dd6344ec82 100644
--- a/web/src/test/java/org/springframework/security/web/authentication/DefaultLoginPageGeneratingFilterTests.java
+++ b/web/src/test/java/org/springframework/security/web/authentication/DefaultLoginPageGeneratingFilterTests.java
@@ -199,7 +199,7 @@ public class DefaultLoginPageGeneratingFilterTests {
 				          <input type="text" id="ott-username" name="username" placeholder="Username" required>
 				        </p>
 
-				        <button class="primary" type="submit" form="ott-form">Send Token</button>
+				        <button class="primary" type="submit">Send Token</button>
 				      </form>
 				""");
 	}
@@ -225,7 +225,7 @@ public class DefaultLoginPageGeneratingFilterTests {
 				          <input type="text" id="ott-username" name="username" placeholder="Username" required>
 				        </p>
 
-				        <button class="primary" type="submit" form="ott-form">Send Token</button>
+				        <button class="primary" type="submit">Send Token</button>
 				      </form>
 				""");
 		assertThat(response.getContentAsString()).doesNotContain("Password");
@@ -254,7 +254,7 @@ public class DefaultLoginPageGeneratingFilterTests {
 				          <input type="text" id="ott-username" name="username" placeholder="Username" required>
 				        </p>
 
-				        <button class="primary" type="submit" form="ott-form">Send Token</button>
+				        <button class="primary" type="submit">Send Token</button>
 				      </form>
 				""");
 		assertThat(response.getContentAsString()).contains("Password");