spring-projects / spring-projects/spring-security
SEC-2621: Unable to set continueChainBeforeSuccessfulAuthentication with FormLoginConfigurer
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Mathieu Ruellan (Migrated from SEC-2621) said:
I'm making a REST API
Responses are rendered with Spring MVC and Jackson.
I would like that all responses are generated in the same way. After a login success, the UsernamePasswordAuthentificationFilter returns.
I would like that the request continues in order to handle it with my spring mvc controller.
But, i can't override final classes, and the current configurer doesn't provide a setter to the continueChainBeforeSuccessfulAuthentication attribut.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading FormLoginConfigurer and UsernamePasswordAuthenticationFilter, focusing on how continueChainBeforeSuccessfulAuthentication is configured after successful login. Trace the existing authentication configuration path and its tests, then verify that the option can be set and the request continues to the Spring MVC controller with the expected response handling.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- api, authentication, backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100