mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-03-06 13:29:13 +00:00
SEEC-255: Always create HttpSession before calling AuthenticationDetailsSource.
This commit is contained in:
parent
a5ca1ddcc7
commit
d8a56d4e60
@ -72,13 +72,13 @@ public class AuthenticationProcessingFilter extends AbstractProcessingFilter {
|
||||
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username,
|
||||
password);
|
||||
|
||||
// Allow subclasses to set the "details" property
|
||||
setDetails(request, authRequest);
|
||||
|
||||
// Place the last username attempted into HttpSession for views
|
||||
request.getSession()
|
||||
.setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
|
||||
|
||||
// Allow subclasses to set the "details" property
|
||||
setDetails(request, authRequest);
|
||||
|
||||
return this.getAuthenticationManager().authenticate(authRequest);
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user