Details
-
Improvement
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
1.1.0.M1
-
None
-
None
Description
SocialAuthenticationFilter extends GenericFilterBean, but lots of code copied from AbstractAuthenticationProcessingFilter. It is better to extend AbstractAuthenticationProcessingFilter.
A spring-security issue SEC-2102 was raised to add redirect handling in AbstractAuthenticationProcessingFilter. See https://jira.springsource.org/browse/SEC-2102.
See https://github.com/jiwhiz/spring-social/tree/security-refactor for the code changes.