mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-08 19:42:48 +00:00
SEEC-255: Always create HttpSession before calling AuthenticationDetailsSource.
This commit is contained in:
parent
a5ca1ddcc7
commit
d8a56d4e60
@ -72,13 +72,13 @@ public class AuthenticationProcessingFilter extends AbstractProcessingFilter {
|
|||||||
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username,
|
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username,
|
||||||
password);
|
password);
|
||||||
|
|
||||||
// Allow subclasses to set the "details" property
|
|
||||||
setDetails(request, authRequest);
|
|
||||||
|
|
||||||
// Place the last username attempted into HttpSession for views
|
// Place the last username attempted into HttpSession for views
|
||||||
request.getSession()
|
request.getSession()
|
||||||
.setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
|
.setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
|
||||||
|
|
||||||
|
// Allow subclasses to set the "details" property
|
||||||
|
setDetails(request, authRequest);
|
||||||
|
|
||||||
return this.getAuthenticationManager().authenticate(authRequest);
|
return this.getAuthenticationManager().authenticate(authRequest);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user