Ronan Daly (Migrated from SEC-1483) said:
Currently the User constructor takes a Collection as a parameter. If it were to take Collection<? extends GrantedAuthority> it would mean that users would not have to implement a special method just to generate the collection as that type. The change would be trivial.
Luke Taylor said:
Added to 3.0 and master branches.
It would seem that UserDetails itself got left behind in this modification, as it would seem to make sense to also allow any implementing classes of UserDetails to accept <? extends GrantedAuthority> on the getAuthorities method definition as well... Would it make sens to reopen this task, or create a separate one?