mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-06 02:32:14 +00:00
Merge branch '6.2.x'
This commit is contained in:
commit
a761042157
@ -22,7 +22,7 @@ Classes can be authored more robustly if they know the `SecurityContextHolder` a
|
|||||||
|
|
||||||
[[anonymous-config]]
|
[[anonymous-config]]
|
||||||
== Configuration
|
== Configuration
|
||||||
Anonymous authentication support is provided automatically when you use the HTTP configuration (introduced inSpring Security 3.0).
|
Anonymous authentication support is provided automatically when you use the HTTP configuration (introduced in Spring Security 3.0).
|
||||||
You can customize (or disable) it by using the `<anonymous>` element.
|
You can customize (or disable) it by using the `<anonymous>` element.
|
||||||
You need not configure the beans described here unless you are using traditional bean configuration.
|
You need not configure the beans described here unless you are using traditional bean configuration.
|
||||||
|
|
||||||
|
@ -200,7 +200,7 @@ If the `Authentication` contains a reference to an object in the cache (such as
|
|||||||
You need to take this into account if you use a cache.
|
You need to take this into account if you use a cache.
|
||||||
An obvious solution is to first make a copy of the object, either in the cache implementation or in the `AuthenticationProvider` that creates the returned `Authentication` object.
|
An obvious solution is to first make a copy of the object, either in the cache implementation or in the `AuthenticationProvider` that creates the returned `Authentication` object.
|
||||||
Alternatively, you can disable the `eraseCredentialsAfterAuthentication` property on `ProviderManager`.
|
Alternatively, you can disable the `eraseCredentialsAfterAuthentication` property on `ProviderManager`.
|
||||||
See the Javadoc for the {security-api-url}org/springframework/security/authentication/ProviderManager.html[Javadoc] class.
|
See the Javadoc for the {security-api-url}org/springframework/security/authentication/ProviderManager.html[ProviderManager] class.
|
||||||
|
|
||||||
[[servlet-authentication-authenticationprovider]]
|
[[servlet-authentication-authenticationprovider]]
|
||||||
== AuthenticationProvider
|
== AuthenticationProvider
|
||||||
|
Loading…
x
Reference in New Issue
Block a user