This repository was archived by the owner on Nov 29, 2022. It is now read-only.
This repository was archived by the owner on Nov 29, 2022. It is now read-only.
SAMLProcessingFilter does not respect AuthenticationDetailsSource #466
Description
SAMLProcessingFilter, like any other filters extending AbstractAuthenticationProcessingFilter, should respect what has been setted with setAuthenticationDetailsSource.
The value in this.authenticationDetailsSource is completely ignored by this filter.
Furthermore, SAMLAuthenticationProvider drops the authenticationDetails information provided within the Authentication argument in the authenticate method, setting the details of the returned Authentication object with userDetails variable value, but this value is already retrievable by calling getPrincipal on the returned Authentication.