From 1fa89e99c4a7fd88ad851d77228f8a56a168fc2f Mon Sep 17 00:00:00 2001 From: Ben Alex Date: Fri, 25 May 2007 02:00:37 +0000 Subject: [PATCH] SEC-307: Preserve result of AuthenticationManager.authenticate(Authentication). --- .../acegisecurity/ui/rememberme/RememberMeProcessingFilter.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/src/main/java/org/acegisecurity/ui/rememberme/RememberMeProcessingFilter.java b/core/src/main/java/org/acegisecurity/ui/rememberme/RememberMeProcessingFilter.java index 9616b1f0f3..0482e27ca4 100644 --- a/core/src/main/java/org/acegisecurity/ui/rememberme/RememberMeProcessingFilter.java +++ b/core/src/main/java/org/acegisecurity/ui/rememberme/RememberMeProcessingFilter.java @@ -106,7 +106,7 @@ public class RememberMeProcessingFilter implements Filter, InitializingBean, App if (rememberMeAuth != null) { // Attempt authenticaton via AuthenticationManager try { - authenticationManager.authenticate(rememberMeAuth); + rememberMeAuth = authenticationManager.authenticate(rememberMeAuth); // Store to SecurityContextHolder SecurityContextHolder.getContext().setAuthentication(rememberMeAuth);