You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<1> Before running the rest of the application, `SecurityContextPersistenceFilter` loads the `SecurityContext` from the `SecurityContextRepository` and sets it on the `SecurityContextHolder`.
126
-
<2> Next, the application is ran.
127
-
<3> Finally, if the `SecurityContext` has changed, we save the `SecurityContext` using the `SecurityContextPersistenceRepository`.
125
+
image:{icondir}/number_1.png[] Before running the rest of the application, `SecurityContextPersistenceFilter` loads the `SecurityContext` from the `SecurityContextRepository` and sets it on the `SecurityContextHolder`.
126
+
127
+
image:{icondir}/number_2.png[] Next, the application is ran.
128
+
129
+
image:{icondir}/number_3.png[] Finally, if the `SecurityContext` has changed, we save the `SecurityContext` using the `SecurityContextPersistenceRepository`.
128
130
This means that when using `SecurityContextPersistenceFilter`, just setting the `SecurityContextHolder` will ensure that the `SecurityContext` is persisted using `SecurityContextRepository`.
129
131
130
132
In some cases a response is committed and written to the client before the `SecurityContextPersisteneFilter` method completes.
@@ -141,8 +143,9 @@ The {security-api-url}org/springframework/security/web/context/SecurityContextHo
<1> Before running the rest of the application, `SecurityContextHolderFilter` loads the `SecurityContext` from the `SecurityContextRepository` and sets it on the `SecurityContextHolder`.
145
-
<2> Next, the application is ran.
146
+
image:{icondir}/number_1.png[] Before running the rest of the application, `SecurityContextHolderFilter` loads the `SecurityContext` from the `SecurityContextRepository` and sets it on the `SecurityContextHolder`.
147
+
148
+
image:{icondir}/number_2.png[] Next, the application is ran.
146
149
147
150
Unlike, xref:servlet/authentication/persistence.adoc#securitycontextpersistencefilter[`SecurityContextPersisteneFilter`], `SecurityContextHolderFilter` only loads the `SecurityContext` it does not save the `SecurityContext`.
148
151
This means that when using `SecurityContextHolderFilter`, it is required that the `SecurityContext` is explicitly saved.
@@ -169,4 +172,4 @@ public SecurityFilterChain filterChain(HttpSecurity http) {
0 commit comments