do not call the authentication mechanism if the user is already authenticated

This commit is contained in:
Sebastian Sdorra
2012-02-11 16:36:37 +01:00
parent f0364e1520
commit d4f100776a

View File

@@ -120,7 +120,11 @@ public class BasicAuthenticationFilter extends HttpFilter
User user = null;
String authentication = request.getHeader(HEADER_AUTHORIZATION);
if (Util.isNotEmpty(authentication))
if (securityContext.isAuthenticated())
{
user = securityContext.getUser();
}
else if (Util.isNotEmpty(authentication))
{
if (!authentication.toUpperCase().startsWith(AUTHORIZATION_BASIC_PREFIX))
{
@@ -129,10 +133,6 @@ public class BasicAuthenticationFilter extends HttpFilter
user = authenticate(request, response, securityContext, authentication);
}
else if (securityContext.isAuthenticated())
{
user = securityContext.getUser();
}
if (user == null)
{