spring-projects / spring-projects/spring-security
SEC-2772: Autowire InvalidSessionStrategy into SessionManagementFilter
Open
Nobody has claimed this yet.
in: web
type: enhancement
type: jira
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Mordechai Tamam (Migrated from SEC-2772) said:
At the moment, the InvalidSessionStrategy is not auto-wired into the session management filter.
Still, It can be done like opposed on this SO question, but why not auto-wiring it from the context...
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating SessionManagementFilter and InvalidSessionStrategy in the Spring Security codebase; no source file or test is named in the issue. Determine how the context should provide InvalidSessionStrategy to the filter, and consider the work complete when that strategy is automatically wired from the application context.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100