Skip to content

SpnegoAuthenticationProcessingFilter should not continue filter chain on successful authentication #96

@alt250

Description

@alt250

Currently SpnegoAuthenticationProcessingFilter.doFilter() is doing

        if (header != null && (header.startsWith("Negotiate ") || header.startsWith("Kerberos "))) {
...
            if (successHandler != null) {
                successHandler.onAuthenticationSuccess(request, response, authentication);
            }
        }
        chain.doFilter(request, response);

when successHandler is SimpleUrlAuthenticationSuccessHandler, the success handler will commit the response thus continuing the filter chain will fail with "IllegalStateException Committed" if a downstream filter calls response.send*()

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions