Rob Winch d973f5f80c SEC-2078: AbstractPreAuthenticatedProcessingFilter requriesAuthentication support for non-String Principals ...

Previously, if the Principal returned by getPreAuthenticatedPrincipal was not a String,
it prevented requiresAuthentication from detecting when the Principal was the same.
This caused the need to authenticate the user for every request even when the Principal
did not change.

Now requiresAuthentication will check to see if the result of
getPreAuthenticatedPrincipal is equal to the current Authentication.getPrincipal().

2015-02-24 16:37:55 -06:00

..

src

SEC-2078: AbstractPreAuthenticatedProcessingFilter requriesAuthentication support for non-String Principals

2015-02-24 16:37:55 -06:00

pom.xml

SEC-2863: Update to Spring 4.1.5

2015-02-20 11:43:04 -06:00

web.gradle

SEC-2747: Remove spring-core dependency from spring-security-crypto

2014-11-20 16:16:22 -06:00