do not call the authentication mechanism if the user is already authenticated

This commit is contained in:
Sebastian Sdorra
2012-02-11 16:36:37 +01:00
parent f0364e1520
commit d4f100776a

View File

@@ -120,7 +120,11 @@ public class BasicAuthenticationFilter extends HttpFilter
User user = null; User user = null;
String authentication = request.getHeader(HEADER_AUTHORIZATION); String authentication = request.getHeader(HEADER_AUTHORIZATION);
if (Util.isNotEmpty(authentication)) if (securityContext.isAuthenticated())
{
user = securityContext.getUser();
}
else if (Util.isNotEmpty(authentication))
{ {
if (!authentication.toUpperCase().startsWith(AUTHORIZATION_BASIC_PREFIX)) if (!authentication.toUpperCase().startsWith(AUTHORIZATION_BASIC_PREFIX))
{ {
@@ -129,10 +133,6 @@ public class BasicAuthenticationFilter extends HttpFilter
user = authenticate(request, response, securityContext, authentication); user = authenticate(request, response, securityContext, authentication);
} }
else if (securityContext.isAuthenticated())
{
user = securityContext.getUser();
}
if (user == null) if (user == null)
{ {