root
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Actions 9 Packages Projects Releases Wiki Activity

Clarify HttpSecurity.registerFilterAt 

Fixes: gh-5113
This commit is contained in:
Rob Winch 2018-03-19 14:41:03 -05:00
parent 1851aaa66d
commit 01152ede41
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/src/main/java/org/springframework/security/config/annotation/web/builders/HttpSecurity.java
View File

@ -1163,6 +1163,11 @@ public final class HttpSecurity extends
* addFilterAt(new CustomFilter(), UsernamePasswordAuthenticationFilter.class) * addFilterAt(new CustomFilter(), UsernamePasswordAuthenticationFilter.class)
* </pre> * </pre>
* *
* Registration of multiple Filters in the same location means their ordering is not
* deterministic. More concretely, registering multiple Filters in the same location
* does not override existing Filters. Instead, do not register Filters you do not
* want to uses.
*
* @param filter the Filter to register * @param filter the Filter to register
* @param atFilter the location of another {@link Filter} that is already registered * @param atFilter the location of another {@link Filter} that is already registered
* (i.e. known) with Spring Security. * (i.e. known) with Spring Security.