Don't add exception to session if allowSessionCreation is false.

This commit is contained in:
Luke Taylor 2008-02-01 16:03:56 +00:00
parent 3da2471b7f
commit e42fdf29ae
1 changed files with 5 additions and 3 deletions

View File

@ -184,9 +184,11 @@ public class OpenIdAuthenticationProcessingFilter extends AbstractProcessingFilt
logger.debug("Authentication request failed: " + failed.toString());
}
try {
request.getSession().setAttribute(SPRING_SECURITY_LAST_EXCEPTION_KEY, failed);
} catch (Exception ignored) {
if (getAllowSessionCreation()) {
try {
request.getSession().setAttribute(SPRING_SECURITY_LAST_EXCEPTION_KEY, failed);
} catch (Exception ignored) {
}
}
super.getRememberMeServices().loginFail(request, response);