>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > famous last words he he :)
I have a plan! :-) On a side note: while grepping through the code to find the appropriate place to hook in to set the cipherKey in code I noticed this: https://github.com/apache/shiro/blob/main/core/src/main/java/org/apache/shiro/mgt/AbstractRememberMeManager.java#L100 The downcast is further down that it has to be: generateNewKey() is defined on AbstractSymmetricCipherService which is two levels up from AesCipherService. AesCipherService extends DefaultBlockCipherService which extends AbstractSymmetricCipherService where generateNewKey() is defined. (I was wondering if replacing the cipherService was the way to go and figure "probably not", mainly because of that downcast and because the interesting methods weren't defined on the CipherService interface)
