SEC-2497: checkForPrincipalChanges limited to String Principal #2716
Labels
in: web
An issue in web modules (web, webmvc)
status: duplicate
A duplicate of another issue
type: bug
A general bug
type: jira
An issue that was migrated from JIRA
Fabrice Marchal (Migrated from SEC-2497) said:
In AbstractPreAuthenticatedProcessingFilter,
method requiresAuthentication , Principal are assumed to be String
if (currentUser.getName().equals(principal))
should be
if (currentUser.getPrincipal().equals(principal))
The text was updated successfully, but these errors were encountered: