Gerr Magnus Mes (Migrated from SEC-1008) said:
Please, add Authentication (or authenticationDetails ) parameter to UserDetailsChecker.check(..) method. I need remote address for some sort checks.
Luke Taylor said:
I think this would ultimately be a misplacement of authentication logic which should probably go in an extended AuthenticationProvider. This interface is intended for simple checking of persistent data (for locked flags etc). Changing it would break existing implementations and it is also used from situations where an Authentication object isn’t actually available.