Merge branch '6.0.x'
This commit is contained in:
commit
57e134cc5f
|
@ -324,7 +324,7 @@ public final class SessionManagementConfigurer<H extends HttpSecurityBuilder<H>>
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Controls the maximum number of sessions for a user. The default is to allow any
|
* Controls the maximum number of sessions for a user. The default is to allow any
|
||||||
* number of users.
|
* number of sessions.
|
||||||
* @param maximumSessions the maximum number of sessions for a user
|
* @param maximumSessions the maximum number of sessions for a user
|
||||||
* @return the {@link SessionManagementConfigurer} for further customizations
|
* @return the {@link SessionManagementConfigurer} for further customizations
|
||||||
*/
|
*/
|
||||||
|
|
|
@ -149,7 +149,7 @@ Assuming that no other `SecurityFilterChain` instances match, `SecurityFilterCha
|
||||||
// FIXME: add link to pattern matching
|
// FIXME: add link to pattern matching
|
||||||
|
|
||||||
Notice that `SecurityFilterChain~0~` has only three security `Filter` instances configured.
|
Notice that `SecurityFilterChain~0~` has only three security `Filter` instances configured.
|
||||||
However, `SecurityFilterChain~n~` has four security `Filter` instanes configured.
|
However, `SecurityFilterChain~n~` has four security `Filter` instances configured.
|
||||||
It is important to note that each `SecurityFilterChain` can be unique and can be configured in isolation.
|
It is important to note that each `SecurityFilterChain` can be unique and can be configured in isolation.
|
||||||
In fact, a `SecurityFilterChain` might have zero security `Filter` instances if the application wants Spring Security to ignore certain requests.
|
In fact, a `SecurityFilterChain` might have zero security `Filter` instances if the application wants Spring Security to ignore certain requests.
|
||||||
// FIXME: add link to configuring multiple `SecurityFilterChain` instances
|
// FIXME: add link to configuring multiple `SecurityFilterChain` instances
|
||||||
|
|
|
@ -151,7 +151,7 @@ To achieve this, any interfaces or classes where Spring Security uses OpenSAML i
|
||||||
This makes it possible for you to switch out OpenSAML for some other library or an unsupported version of OpenSAML.
|
This makes it possible for you to switch out OpenSAML for some other library or an unsupported version of OpenSAML.
|
||||||
|
|
||||||
As a natural outcome of these two goals, Spring Security's SAML API is quite small relative to other modules.
|
As a natural outcome of these two goals, Spring Security's SAML API is quite small relative to other modules.
|
||||||
Instead, such classes as `OpenSamlAuthenticationRequestFactory` and `OpenSamlAuthenticationProvider` expose `Converter` implementationss that customize various steps in the authentication process.
|
Instead, such classes as `OpenSamlAuthenticationRequestFactory` and `OpenSamlAuthenticationProvider` expose `Converter` implementations that customize various steps in the authentication process.
|
||||||
|
|
||||||
For example, once your application receives a `SAMLResponse` and delegates to `Saml2WebSsoAuthenticationFilter`, the filter delegates to `OpenSamlAuthenticationProvider`:
|
For example, once your application receives a `SAMLResponse` and delegates to `Saml2WebSsoAuthenticationFilter`, the filter delegates to `OpenSamlAuthenticationProvider`:
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue