From 790c3e6f79e20d5fefeb7caf52d68101de72dd26 Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Wed, 12 Nov 2008 00:44:34 +0000 Subject: [PATCH] Updated FAQ to add variant of "redirecting to entry point" debug message when no AnonymousProcessingFilter is in use and an AuthenticationCredentialsNotFoundException is thrown instead of AccessDeniedException. --- src/site/fml/faq.fml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src/site/fml/faq.fml b/src/site/fml/faq.fml index f1b74c0c5e..4fe29142df 100644 --- a/src/site/fml/faq.fml +++ b/src/site/fml/faq.fml @@ -148,6 +148,22 @@ org.springframework.security.AccessDeniedException: Access is denied

+ + I get an exception with the message "An Authentication object was not found in the SecurityContext". What's wrong? + +

+ This is a another debug level message which occurs the first time an anonymous user attempts to access a protected + resource, but when you do not have an AnonymousProcessingFilter in your filter chain configuration. + 

+    					DEBUG [ExceptionTranslationFilter] - Authentication exception occurred; redirecting to authentication entry point
+    					org.springframework.security.AuthenticationCredentialsNotFoundException: An Authentication object was not found in the SecurityContext
+    					at org.springframework.security.intercept.AbstractSecurityInterceptor.credentialsNotFound(AbstractSecurityInterceptor.java:342)
+    					at org.springframework.security.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:254)
+
+ It is normal and shouldn't be anything to worry about. +

+ + I'm using Tomcat and have enabled HTTPS for my login page, switching back to HTTP afterwards. It doesn't work - I just