SEC-2717: initFilterBean() is not called within AbstractAuthenticationProcessingFilter

[spring-projects-issues]

Gael Hatchue (Migrated from SEC-2717) said:

AbstractAuthenticationProcessingFilter overrides afterPropertiesSet() method, but neither calls initFilterBean() nor afterPropertiesSet() from GenericFilterBean. Is this by design or a bug?

This seems similar to SEC-2038.

[spring-projects-issues]

Scott Rossillo said:

Seems like a bug as it breaks the contract of GenericFilterBean.