mirror of
				https://github.com/spring-projects/spring-security.git
				synced 2025-10-30 22:28:46 +00:00 
			
		
		
		
	Merge branch '5.8.x' into 6.0.x
This commit is contained in:
		
						commit
						a76b1f7a51
					
				| @ -40,8 +40,9 @@ import org.springframework.util.Assert; | ||||
| public class DaoAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider { | ||||
| 
 | ||||
| 	/** | ||||
| 	 * The plaintext password used to perform PasswordEncoder#matches(CharSequence, | ||||
| 	 * String)} on when the user is not found to avoid SEC-2056. | ||||
| 	 * The plaintext password used to perform | ||||
| 	 * {@link PasswordEncoder#matches(CharSequence, String)} on when the user is not found | ||||
| 	 * to avoid SEC-2056. | ||||
| 	 */ | ||||
| 	private static final String USER_NOT_FOUND_PASSWORD = "userNotFoundPassword"; | ||||
| 
 | ||||
|  | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user