89f8310d6c
SessionAuthenticationFilter requires accessing the HttpSession to do its job. Previously, there was no way to just disable the SessionAuthenticationFilter despite the fact that SessionAuthenticationStrategy is invoked by the authentication filters directly. This commit adds an option to disable SessionManagmentFilter in favor of requiring explicit SessionAuthenticationStrategy invocation already performed by the authentication filters. Closes gh-11455 |
||
|---|---|---|
| .. | ||
| authentication-manager.adoc | ||
| http.adoc | ||
| index.adoc | ||
| ldap.adoc | ||
| method-security.adoc | ||
| websocket.adoc | ||