spring-security/core
Rob Winch b4fbabdbfd SEC-2012: Remove incorrect javadoc from UserDetails#getPassword()
Previously the javadoc stated that password could not be null. However,
since the introduction of CredentialsContainer introduced in SEC-1493 the
password can be null.

The changes remove the statement that passwords cannot be null. While this
is a non-passive change to the interface, the current state leaves no choice
for a non-passive change. Removing the javadoc was determined the better
option since erasing the credentials was an explicit feature request. Note
that replacing the password with an obscure String can be risky as it
introduces the risk that the value is used to authenticate.
2012-07-20 15:34:28 -05:00
..
src SEC-2012: Remove incorrect javadoc from UserDetails#getPassword() 2012-07-20 15:34:28 -05:00
core.gradle SEC-1906: Update to Gradle 1.0 2012-07-05 12:41:56 -05:00
template.mf SEC-1743: Separate remoting from core into separate module. 2011-05-16 00:19:30 +01:00