From 6d56af7b6543d6a162c9caf499256fa7e0f37055 Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@users.noreply.github.com>
Date: Mon, 26 Sep 2022 15:54:17 -0500
Subject: [PATCH] SessionManagementDsl.requireExplicitAuthenticationStrategy

---
 .../security/config/web/servlet/SessionManagementDsl.kt         | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/config/src/main/kotlin/org/springframework/security/config/web/servlet/SessionManagementDsl.kt b/config/src/main/kotlin/org/springframework/security/config/web/servlet/SessionManagementDsl.kt
index 813cc1b41b..d0972e49aa 100644
--- a/config/src/main/kotlin/org/springframework/security/config/web/servlet/SessionManagementDsl.kt
+++ b/config/src/main/kotlin/org/springframework/security/config/web/servlet/SessionManagementDsl.kt
@@ -39,6 +39,7 @@ class SessionManagementDsl {
     var sessionAuthenticationErrorUrl: String? = null
     var sessionAuthenticationFailureHandler: AuthenticationFailureHandler? = null
     var enableSessionUrlRewriting: Boolean? = null
+    var requireExplicitAuthenticationStrategy: Boolean? = null
     var sessionCreationPolicy: SessionCreationPolicy? = null
     var sessionAuthenticationStrategy: SessionAuthenticationStrategy? = null
     private var sessionFixation: ((SessionManagementConfigurer<HttpSecurity>.SessionFixationConfigurer) -> Unit)? = null
@@ -108,6 +109,7 @@ class SessionManagementDsl {
     internal fun get(): (SessionManagementConfigurer<HttpSecurity>) -> Unit {
         return { sessionManagement ->
             invalidSessionUrl?.also { sessionManagement.invalidSessionUrl(invalidSessionUrl) }
+            requireExplicitAuthenticationStrategy?.also { sessionManagement.requireExplicitAuthenticationStrategy(requireExplicitAuthenticationStrategy!!) }
             invalidSessionStrategy?.also { sessionManagement.invalidSessionStrategy(invalidSessionStrategy) }
             sessionAuthenticationErrorUrl?.also { sessionManagement.sessionAuthenticationErrorUrl(sessionAuthenticationErrorUrl) }
             sessionAuthenticationFailureHandler?.also { sessionManagement.sessionAuthenticationFailureHandler(sessionAuthenticationFailureHandler) }