Phillip Webb fd78d055aa Lazily initialize userNotFoundEncodedPassword ...

Update `DaoAuthenticationProvider` so that `userNotFoundEncodedPassword`
is lazily initialized on the first call to `retrieveUser`, rather than
in `doAfterPropertiesSet`.

Since some `PasswordEncoder` implementations can be slow, this change
can help to improve application startup times and the expense of some
delay with the first login.

Note that `userNotFoundEncodedPassword` creation occurs on the first
user retrieval, regardless of whether the user is ultimately found. This
ensures consistent processing times, regardless of the outcome.

First Call:
	Found      = encode(userNotFound) + decode(supplied)
	Not-Found  = encode(userNotFound) + decode(userNotFound)

Subsequent Call:
	Found      = decode(supplied)
	Not-Found  = decode(userNotFound)

Fixes gh-4915

2018-01-24 11:06:08 -06:00

..

src

Lazily initialize userNotFoundEncodedPassword

2018-01-24 11:06:08 -06:00

spring-security-core.gradle

Update to Mockito 2.10.0

2017-10-09 16:13:11 -05:00