|
|
|
@ -40,7 +40,7 @@ import org.springframework.util.Assert; |
|
|
|
public class DaoAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider { |
|
|
|
public class DaoAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider { |
|
|
|
|
|
|
|
|
|
|
|
/** |
|
|
|
/** |
|
|
|
* The plaintext password used to perform PasswordEncoder#matches(CharSequence, |
|
|
|
* The plaintext password used to perform {@link PasswordEncoder#matches(CharSequence, |
|
|
|
* String)} on when the user is not found to avoid SEC-2056. |
|
|
|
* String)} on when the user is not found to avoid SEC-2056. |
|
|
|
*/ |
|
|
|
*/ |
|
|
|
private static final String USER_NOT_FOUND_PASSWORD = "userNotFoundPassword"; |
|
|
|
private static final String USER_NOT_FOUND_PASSWORD = "userNotFoundPassword"; |
|
|
|
|