diff --git a/web/src/main/java/org/springframework/security/web/context/HttpSessionSecurityContextRepository.java b/web/src/main/java/org/springframework/security/web/context/HttpSessionSecurityContextRepository.java index afc6035e5d..100c11bb53 100644 --- a/web/src/main/java/org/springframework/security/web/context/HttpSessionSecurityContextRepository.java +++ b/web/src/main/java/org/springframework/security/web/context/HttpSessionSecurityContextRepository.java @@ -142,7 +142,7 @@ public class HttpSessionSecurityContextRepository implements SecurityContextRepo SaveContextOnUpdateOrErrorResponseWrapper.class); if (responseWrapper == null) { boolean httpSessionExists = request.getSession(false) != null; - SecurityContext initialContext = SecurityContextHolder.createEmptyContext(); + SecurityContext initialContext = this.securityContextHolderStrategy.createEmptyContext(); responseWrapper = new SaveToSessionResponseWrapper(response, request, httpSessionExists, initialContext); } responseWrapper.saveContext(context);