mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-03-04 04:19:09 +00:00
Allow authenticationIsRequired to be overridden
Issue gh-10347
This commit is contained in:
parent
4d62621094
commit
1e0e9a2c98
@ -202,7 +202,7 @@ public class BasicAuthenticationFilter extends OncePerRequestFilter {
|
||||
chain.doFilter(request, response);
|
||||
}
|
||||
|
||||
private boolean authenticationIsRequired(String username) {
|
||||
protected boolean authenticationIsRequired(String username) {
|
||||
// Only reauthenticate if username doesn't match SecurityContextHolder and user
|
||||
// isn't authenticated (see SEC-53)
|
||||
Authentication existingAuth = this.securityContextHolderStrategy.getContext().getAuthentication();
|
||||
|
Loading…
x
Reference in New Issue
Block a user