SEC-307: Preserve result of AuthenticationManager.authenticate(Authentication).

2026-07-19 09:35:12 +00:00 · 2007-05-25 02:00:37 +00:00
parent 3b9a8dc53e
commit 1fa89e99c4
1 changed files with 1 additions and 1 deletions
@@ -106,7 +106,7 @@ public class RememberMeProcessingFilter implements Filter, InitializingBean, App
            if (rememberMeAuth != null) {
                // Attempt authenticaton via AuthenticationManager
                try {
-                    authenticationManager.authenticate(rememberMeAuth);
+                	rememberMeAuth = authenticationManager.authenticate(rememberMeAuth);

                    // Store to SecurityContextHolder
                    SecurityContextHolder.getContext().setAuthentication(rememberMeAuth);