1
0
mirror of synced 2026-08-05 01:36:56 +00:00

Merge branch '6.2.x'

This commit is contained in:
Marcus Hert Da Coregio
2024-01-17 15:22:34 -03:00
2 changed files with 2 additions and 2 deletions
@@ -22,7 +22,7 @@ Classes can be authored more robustly if they know the `SecurityContextHolder` a
[[anonymous-config]]
== Configuration
Anonymous authentication support is provided automatically when you use the HTTP configuration (introduced inSpring Security 3.0).
Anonymous authentication support is provided automatically when you use the HTTP configuration (introduced in Spring Security 3.0).
You can customize (or disable) it by using the `<anonymous>` element.
You need not configure the beans described here unless you are using traditional bean configuration.
@@ -200,7 +200,7 @@ If the `Authentication` contains a reference to an object in the cache (such as
You need to take this into account if you use a cache.
An obvious solution is to first make a copy of the object, either in the cache implementation or in the `AuthenticationProvider` that creates the returned `Authentication` object.
Alternatively, you can disable the `eraseCredentialsAfterAuthentication` property on `ProviderManager`.
See the Javadoc for the {security-api-url}org/springframework/security/authentication/ProviderManager.html[Javadoc] class.
See the Javadoc for the {security-api-url}org/springframework/security/authentication/ProviderManager.html[ProviderManager] class.
[[servlet-authentication-authenticationprovider]]
== AuthenticationProvider