Downgrade AuthenticationFilter modifier

Fixes gh-7177
6 years ago · a5cfd9fdb9
1 changed files with 1 additions and 1 deletions
--- a/web/src/main/java/org/springframework/security/web/authentication/AuthenticationFilter.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/AuthenticationFilter.java
@ -166,7 +166,7 @@ public class AuthenticationFilter extends OncePerRequestFilter {
				@@ -166,7 +166,7 @@ public class AuthenticationFilter extends OncePerRequestFilter {
 		this.successHandler.onAuthenticationSuccess(request, response, chain, authentication);
 	}

-	public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
+	protected Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
 			throws AuthenticationException, IOException, ServletException {
 		Authentication authentication = this.authenticationConverter.convert(request);
 		if (authentication == null) {