diff --git a/openid/src/main/java/org/springframework/security/ui/openid/OpenIdAuthenticationProcessingFilter.java b/openid/src/main/java/org/springframework/security/ui/openid/OpenIdAuthenticationProcessingFilter.java index 549bcc2f7f..a73c6c23ed 100644 --- a/openid/src/main/java/org/springframework/security/ui/openid/OpenIdAuthenticationProcessingFilter.java +++ b/openid/src/main/java/org/springframework/security/ui/openid/OpenIdAuthenticationProcessingFilter.java @@ -184,9 +184,11 @@ public class OpenIdAuthenticationProcessingFilter extends AbstractProcessingFilt logger.debug("Authentication request failed: " + failed.toString()); } - try { - request.getSession().setAttribute(SPRING_SECURITY_LAST_EXCEPTION_KEY, failed); - } catch (Exception ignored) { + if (getAllowSessionCreation()) { + try { + request.getSession().setAttribute(SPRING_SECURITY_LAST_EXCEPTION_KEY, failed); + } catch (Exception ignored) { + } } super.getRememberMeServices().loginFail(request, response);