Expose framework created SessionAuthenticationStrategy

Summary

In scenarios where a custom AbstractAuthenticationProcessingFilter is created using XML configuration, it would be interesting to inject the SessionAuthenticationStrategy instance already created and wired by framework instead of creating our own or having to use some workarounds to get it.

Actual Behavior

SessionAuthenticationStrategy created by the framework is not exposed to be used by other beans.

Expected Behavior

Expose the framework created SessionAuthenticationStrategy as an aliased bean, similarly to AuthenticationManager (via <security:authentication-manager>).

Configuration

<bean id="usernamePasswordAuthenticationFilter"
     class=" o.s.scurity.web.authentication.UsernamePasswordAuthenticationFilter">

    <property name="sessionAuthenticationStrategy">
        <!-- Workaround to get hold of the framework created SessionAuthenticationStrategy -->
        <ref bean="org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy#0"/>                
    </property>
 </bean>

Version

4.1.1 (probably applicable to previous versions)

Sample

http://stackoverflow.com/questions/26429967/how-to-get-a-reference-to-sessionauthenticationstrategy-without-configuring-the

Start with the XML security configuration that creates the framework's SessionAuthenticationStrategy and compare its bean exposure with the AuthenticationManager configuration. The work is done when that existing strategy is available to other beans through an aliased bean without requiring the documented workaround.