Closed
Description
Balazs Zagyvai (Migrated from SEC-2107) said:
Both overloads of
AbstractAuthenticationProcessingFilter.successfulAuthentication()
claims to invoke SessionAuthenticationStrategy, which is not true, as
the invokation happens earlier in doFilter().