What is the default setting for continueFilterChainOnUnsuccessfulAuthentication on Spring Security 4.x -
what default setting setcontinuefilterchainonunsuccessfulauthentication() method on spring security's abstractpreauthenticatedprocessingfilter? javadoc summary @ http://docs.spring.io/spring-security/site/docs/4.0.2.release/apidocs/ says:
by default, filter chain proceed when authentication attempt fails in order allow other authentication mechanisms process request. reject credentials immediately, set continuefilterchainonunsuccessfulauthentication flag false.
the documentation on method http://docs.spring.io/spring-security/site/docs/4.0.2.release/apidocs/org/springframework/security/web/authentication/preauth/abstractpreauthenticatedprocessingfilter.html#setcontinuefilterchainonunsuccessfulauthentication(boolean) says:
... if false (the default), authentication failure result in immediate exception.
thanks in advance clarification.
not sure confusion these links saying default set true continue validating other included authentication filters. implementation :-
private boolean continuefilterchainonunsuccessfulauthentication = true;
Comments
Post a Comment