Skip to content

JSPWIKI-1301 see jira for details - #525

Open
spyhunter99 wants to merge 3 commits into
masterfrom
bug/JSPWIKI-1301
Open

spyhunter99 wants to merge 3 commits into
masterfrom
bug/JSPWIKI-1301

Conversation

@spyhunter99

Copy link
Copy Markdown
Contributor

No description provided.

@juanpablo-santos juanpablo-santos left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

one small remark, but generally lgtm

* Regenerates the anti-CSRF token. Called when the session's privilege level changes (i.e. at login), so that
* a token observed before authentication cannot be replayed against the authenticated session.
*/
public void regenerateAntiCsrfToken() {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps this should be a default empty method as well on the Session interface? That would allow to omit the downcasting at DefaultAuthenticationManager#rotateSessionAfterAuthentication above

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants