SEEC-255: Always create HttpSession before calling AuthenticationDetailsSource.
This commit is contained in:
@@ -72,13 +72,13 @@ public class AuthenticationProcessingFilter extends AbstractProcessingFilter {
|
|||||||
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username,
|
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username,
|
||||||
password);
|
password);
|
||||||
|
|
||||||
// Allow subclasses to set the "details" property
|
|
||||||
setDetails(request, authRequest);
|
|
||||||
|
|
||||||
// Place the last username attempted into HttpSession for views
|
// Place the last username attempted into HttpSession for views
|
||||||
request.getSession()
|
request.getSession()
|
||||||
.setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
|
.setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
|
||||||
|
|
||||||
|
// Allow subclasses to set the "details" property
|
||||||
|
setDetails(request, authRequest);
|
||||||
|
|
||||||
return this.getAuthenticationManager().authenticate(authRequest);
|
return this.getAuthenticationManager().authenticate(authRequest);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user