[
https://issues.apache.org/jira/browse/SHIRO-157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Les Hazlewood resolved SHIRO-157.
---------------------------------
Resolution: Fixed
Implementation complete - modified DefaultSecurityManager.resolvePrincipals
method. Logic is implemented in the new bindPrincipalsToSession method.
> RememberMeManager should no longer be consulted once a remembered identity is
> discovered
> ----------------------------------------------------------------------------------------
>
> Key: SHIRO-157
> URL: https://issues.apache.org/jira/browse/SHIRO-157
> Project: Shiro
> Issue Type: Bug
> Components: RememberMe, Subject
> Affects Versions: 1.0.0
> Reporter: Les Hazlewood
> Fix For: 1.0.0
>
> Original Estimate: 0.17h
> Remaining Estimate: 0.17h
>
> When discovering principals (PrincipalCollection) during Subject creation:
> If there are no principals associated with the subject being constructed and
> principals are found from rememberMe, those principals should be added to the
> session to ensure they can be retrieved from the session on later requests.
> It is better to acquire this from the session so the RememberMeManager
> overhead (decryption and/or deserialization) is not incurred unnecessarily
> for every request.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
