1
0
mirror of synced 2026-08-05 17:57:15 +00:00

SEC-1147: Remove use of SessionRegistryUtils. Inlined the methods.

This commit is contained in:
Luke Taylor
2009-05-01 06:45:34 +00:00
parent 8c94e39150
commit 4bc788828c
4 changed files with 18 additions and 73 deletions
@@ -10,7 +10,6 @@ import javax.servlet.http.HttpSession;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.security.authentication.concurrent.SessionRegistry;
import org.springframework.security.authentication.concurrent.SessionRegistryUtils;
import org.springframework.security.core.context.SecurityContextHolder;
/**
@@ -67,10 +66,8 @@ public final class SessionUtils {
if (sessionRegistry != null) {
sessionRegistry.removeSessionInformation(originalSessionId);
Object principal = SessionRegistryUtils.obtainPrincipalFromAuthentication(
SecurityContextHolder.getContext().getAuthentication());
sessionRegistry.registerNewSession(session.getId(), principal);
sessionRegistry.registerNewSession(session.getId(),
SecurityContextHolder.getContext().getAuthentication().getPrincipal());
}
}
}