Skip to content

SEC-2497: checkForPrincipalChanges limited to String Principal #2716

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
spring-projects-issues opened this issue Feb 23, 2014 · 2 comments
Closed
Assignees
Labels
in: web An issue in web modules (web, webmvc) status: duplicate A duplicate of another issue type: bug A general bug type: jira An issue that was migrated from JIRA

Comments

@spring-projects-issues
Copy link

Fabrice Marchal (Migrated from SEC-2497) said:

In AbstractPreAuthenticatedProcessingFilter,
method requiresAuthentication , Principal are assumed to be String

if (currentUser.getName().equals(principal))

should be

if (currentUser.getPrincipal().equals(principal))

@spring-projects-issues
Copy link
Author

Rob Winch said:

Thanks for the report. This appears to be a duplicate of SEC-2078 in which I am waiting for feedback from the reporter. Can you please comment there to let me know if the proposal works.

@spring-projects-issues spring-projects-issues added in: web An issue in web modules (web, webmvc) Resolved type: bug A general bug status: duplicate A duplicate of another issue type: jira An issue that was migrated from JIRA labels Feb 5, 2016
@spring-projects-issues
Copy link
Author

This issue duplicates #2302

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: web An issue in web modules (web, webmvc) status: duplicate A duplicate of another issue type: bug A general bug type: jira An issue that was migrated from JIRA
Projects
None yet
Development

No branches or pull requests

2 participants