Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SEC-2121: JdbcUserDetailsManager's changePassword should not populate the password #2346

Open
spring-projects-issues opened this issue Jan 14, 2013 · 0 comments
Open

SEC-2121: JdbcUserDetailsManager's changePassword should not populate the password #2346

spring-projects-issues opened this issue Jan 14, 2013 · 0 comments
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA

Comments

@spring-projects-issues
Copy link

Luke Taylor (Migrated from SEC-2121) said:

In order to be more consistent with the default behavior of the ProviderManager (which clears the password out) the JdbcUserDetailsManager's changePassword method should not populate the password on the Authentication set on the SecurityContextHolder.

Another option might be to populate the password conditionally (i.e. only if the credentials of the current Authentication are non-null).
@spring-projects-issues spring-projects-issues added in: core An issue in spring-security-core Open type: enhancement A general enhancement type: jira An issue that was migrated from JIRA labels Feb 5, 2016
@spring-projects-issues spring-projects-issues added this to the 3.2 Backlog milestone Feb 5, 2016
@rwinch rwinch modified the milestone: 3.2 Backlog Aug 15, 2016
@rwinch rwinch removed the Open label May 3, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@rwinch @spring-projects-issues