Spring Security
  1. Spring Security
  2. SEC-1534

Want BasicAuthenticationFilter to throw InteractiveAuthenticationSuccessEvent

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Minor Minor
    • Resolution: Won't Fix
    • Affects Version/s: None
    • Fix Version/s: 3.1.0.M1
    • Component/s: Web
    • Labels:
      None

      Description

      I use Spring Security 3.0.4 and our system uses several Authentication Filters.

      When a user log-in, UserPasswordAuthenticationFilter and OpenIDAuthenticationFilter, RememberMeAuthenticationFilter throws InteractiveAuthenticationSuccessEvent.

      However, BasicAuthenticationFilter does not throw InteractiveAuthenticationSuccessEvent.

      I'd like BasicAuthenticationFilter to throw InteractiveAuthenticationSuccessEvent.

      There is another option using AuthenticationSuccessEvent.
      However AuthenticationSuccessEvent does not have generatedBy property, and is not thrown on OpenID and RememberMe login.

        Activity

        Hide
        Luke Taylor added a comment -

        I think the main reason for the different behaviour is that basic authentication is not necessarily "interactive" in the sense that it is often used with web services etc. Is there some specific reason why you need this rather than being able to use the AuthenticationSuccessEvent published by the AuthenticationManager?

        Show
        Luke Taylor added a comment - I think the main reason for the different behaviour is that basic authentication is not necessarily "interactive" in the sense that it is often used with web services etc. Is there some specific reason why you need this rather than being able to use the AuthenticationSuccessEvent published by the AuthenticationManager?
        Hide
        Luke Taylor added a comment -

        No response - closing.

        Show
        Luke Taylor added a comment - No response - closing.
        Hide
        Hatanaka, Akihiro added a comment -

        I'm sorry for late response.

        My system uses some authentication systems(including Basic, OpenID, Form) and I want to detect which system does user uses for authentication.

        AuthenticationSuccessEvent does not have information like InteractiveAuthenticationSuccessEvent's generatedBy property, so I want to use InteractiveAuthenticationSuccessEvent.

        Show
        Hatanaka, Akihiro added a comment - I'm sorry for late response. My system uses some authentication systems(including Basic, OpenID, Form) and I want to detect which system does user uses for authentication. AuthenticationSuccessEvent does not have information like InteractiveAuthenticationSuccessEvent's generatedBy property, so I want to use InteractiveAuthenticationSuccessEvent.

          People

          • Assignee:
            Luke Taylor
            Reporter:
            Hatanaka, Akihiro
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: