What is the default setting for continueFilterChainOnUnsuccessfulAuthentication on Spring Security 4.x -


what default setting setcontinuefilterchainonunsuccessfulauthentication() method on spring security's abstractpreauthenticatedprocessingfilter? javadoc summary @ http://docs.spring.io/spring-security/site/docs/4.0.2.release/apidocs/ says:

by default, filter chain proceed when authentication attempt fails in order allow other authentication mechanisms process request. reject credentials immediately, set continuefilterchainonunsuccessfulauthentication flag false.

the documentation on method http://docs.spring.io/spring-security/site/docs/4.0.2.release/apidocs/org/springframework/security/web/authentication/preauth/abstractpreauthenticatedprocessingfilter.html#setcontinuefilterchainonunsuccessfulauthentication(boolean) says:

... if false (the default), authentication failure result in immediate exception.

thanks in advance clarification.

not sure confusion these links saying default set true continue validating other included authentication filters. implementation :-

private boolean continuefilterchainonunsuccessfulauthentication = true; 

Comments

Popular posts from this blog

html - Outlook 2010 Anchor (url/address/link) -

javascript - Why does running this loop 9 times take 100x longer than running it 8 times? -

Getting gateway time-out Rails app with Nginx + Puma running on Digital Ocean -