Nickolay Mazurkin (Migrated from SEC-1281) said:
I tried to define my own RememberMeService as shown
But RememberMeAuthenticationProvider instance is created with default "SpringSecured" key instead of my own so RememberMeAuthenticationProvider.authenticate never succeeds.
Nickolay Mazurkin said:
I've registered my own RememberMe provider
Everything works fine but as I can see there are two RememberMeAuthentication providers now - one is default in child authentication manager (with the wrong default key) and one is mine in parent authentication manager (with the right mine key).
Luke Taylor said:
Thanks for the report. I've updated the namespace parsing code to make sure that the selected key is used even if an external RememberMeServices is in use, which should fix the issue. If you are using the element then the internally defined provider will always be created.