mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-02-23 06:58:58 +00:00
Previously anonymous authentication was submitted as credentials over the wire which caused the applications to attempt to authenticate the anonymous user. Now if the user is anonymous (determined by the AuthenticationTrustResolver), the AuthenticationSimpleHttpInvokerRequestExecutor does not populate any credentials.