diff --git a/core/src/main/java/org/springframework/security/authentication/AuthenticationTrustResolver.java b/core/src/main/java/org/springframework/security/authentication/AuthenticationTrustResolver.java index de9351ac46..bc85d6e406 100644 --- a/core/src/main/java/org/springframework/security/authentication/AuthenticationTrustResolver.java +++ b/core/src/main/java/org/springframework/security/authentication/AuthenticationTrustResolver.java @@ -29,8 +29,8 @@ public interface AuthenticationTrustResolver { /** * Indicates whether the passed Authentication token represents an anonymous user. Typically * the framework will call this method if it is trying to decide whether an AccessDeniedException - * should result in a final rejection (ie as would be the case if the principal was non-anonymous/fully - * authenticated) or direct the principal to attempt actual authentication (ie as would be the case if the + * should result in a final rejection (i.e. as would be the case if the principal was non-anonymous/fully + * authenticated) or direct the principal to attempt actual authentication (i.e. as would be the case if the * Authentication was merely anonymous). * * @param authentication to test (may be null in which case the method will always return @@ -43,10 +43,11 @@ public interface AuthenticationTrustResolver { /** * Indicates whether the passed Authentication token represents user that has been remembered - * (ie not a user that has been fully authenticated).

No part of the framework uses this method, - * as it is a weak definition of trust levels. The method is provided simply to assist with custom - * AccessDecisionVoters and the like that you might develop. Of course, you don't need to use this - * method either and can develop your own "trust level" hierarchy instead.

+ * (i.e. not a user that has been fully authenticated). + *

+ * The method is provided to assist with custom AccessDecisionVoters and the like that you + * might develop. Of course, you don't need to use this method either and can develop your own "trust level" + * hierarchy instead. * * @param authentication to test (may be null in which case the method will always return * false)