Rob Winch ffe2834f4c SEC-2027: Invoke SecurityContextHolder.clearContext() only on outer invocation of FilterChainProxy ...

When SEC-1950 was introduced it caused problems when a <filter-mapping> was mapped
to multiple dispatchers (i.e. REQUEST and FORWARD) since when the second dispatcher
completed execution it cleared the SecurityContext and the original FilterChain
would then save the cleared out SecurityContext.

We now use a pattern similar to the OncePerRequestFilter to only invoke
SecurityContextHolder.clearContext() on the first invocation of the Filter. We do not simply extend
OncePerRequestFilter because we want to invoke the delegate filters for every request.

2012-08-07 15:56:34 -05:00

..

src

SEC-2027: Invoke SecurityContextHolder.clearContext() only on outer invocation of FilterChainProxy

2012-08-07 15:56:34 -05:00

template.mf

SEC-1689: Moved core codec code into crypto package and removed existing duplication (Hex encoding etc). Refactoring of crypto code to use CharSequence for where possible instead of String.

2011-03-17 01:43:31 +00:00

web.gradle

SEC-1964: Handle missing series in JdbcTokenRepositoryImpl

2012-07-18 16:35:57 -05:00