spring-security/web
Rob Winch d973f5f80c SEC-2078: AbstractPreAuthenticatedProcessingFilter requriesAuthentication support for non-String Principals
Previously, if the Principal returned by getPreAuthenticatedPrincipal was not a String,
it prevented requiresAuthentication from detecting when the Principal was the same.
This caused the need to authenticate the user for every request even when the Principal
did not change.

Now requiresAuthentication will check to see if the result of
getPreAuthenticatedPrincipal is equal to the current Authentication.getPrincipal().
2015-02-24 16:37:55 -06:00
..
src SEC-2078: AbstractPreAuthenticatedProcessingFilter requriesAuthentication support for non-String Principals 2015-02-24 16:37:55 -06:00
pom.xml SEC-2863: Update to Spring 4.1.5 2015-02-20 11:43:04 -06:00
web.gradle SEC-2747: Remove spring-core dependency from spring-security-crypto 2014-11-20 16:16:22 -06:00