java - In CustomLogoutSuccessHandler , The authentication object is always null -
i getting null authentication object in custom logoutsuccesshandler, not sure issue. :(
here spring-security file:
<sec:http auto-config="true" entry-point-ref="ssoprocessingfilterentrypoint" access-decision-manager-ref="affirmativebased"> <sec:intercept-url pattern="/afterauthn/**" access="${spring.security.role}" /> <sec:intercept-url pattern="/tenancy/**" access="${spring.security.role}" /> <!-- add permissions specific urls - i.e. iam.user.read /resources/** --> <sec:intercept-url pattern="/**" access="${default.permission}" /> <sec:logout invalidate-session="true" delete-cookies="true" success-handler-ref="customlogoutsuccesshandler" /> <sec:custom-filter ref="ssoauthenticationfilter" position="pre_auth_filter" /> <sec:session-management> <sec:concurrency-control max-sessions="1" /> </sec:session-management> </sec:http> .. <bean id="customlogoutsuccesshandler" class="usermgmt.service.customlogoutsuccesshandler"> <property name="defaultlogoutsuccessurl" value="${service.provider.logout.success.url}"/> </bean>
my custom class handler:
public class customlogoutsuccesshandler implements logoutsuccesshandler { @override public void onlogoutsuccess(httpservletrequest request, httpservletresponse response, authentication authentication) throws ioexception, servletexception { if (authentication == null) { system.out.println("null"); } else { system.out.println("not null"); } }}
over here, authentication null , spring security version 3.1.0.release
Comments
Post a Comment