Rob Winch 64c9e3e210

Prevent Dupliate GrantedAuthority#getAuthority() ...

If the GrantedAuthority is not equal, but contains a duplicate
GrantedAuthority#getAuthority() then at the time of authentication,
the Filter or WebFilter will duplicate the GrantedAuthority which leads
to a memory leak. This is important to avoid for when we add support for
a GrantedAuthority that might have an issuedAt attribute. If it is too
old, then we'd want only the new GrantedAuthority to be added and the old
instance to be removed. However, the two GrantedAuthority instances
will not be equal because the issuedAt will not be equal.

Closes gh-17981

2025-10-01 15:37:23 -05:00

..

src

Prevent Dupliate GrantedAuthority#getAuthority()

2025-10-01 15:37:23 -05:00

spring-security-web.gradle

Move Web Access API

2025-09-12 10:32:38 -06:00