public class NonSerializableSecurityContext extends Object implements org.acegisecurity.context.SecurityContext
SecurityContextImpl
but doesn't serialize Authentication
.
Authentication
often contains UserDetails
implemented by a plugin,
but when it's persisted as a part of HttpSession
, such instance will never
de-serialize correctly because the container isn't aware of additional classloading
in Jenkins.
Jenkins doesn't work with a clustering anyway, and so it's better to just not persist Authentication at all. See the problem report.
HttpSessionContextIntegrationFilter2
,
Serialized FormConstructor and Description |
---|
NonSerializableSecurityContext() |
NonSerializableSecurityContext(org.acegisecurity.Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
boolean |
equals(Object obj) |
org.acegisecurity.Authentication |
getAuthentication() |
int |
hashCode() |
void |
setAuthentication(org.acegisecurity.Authentication authentication) |
String |
toString() |
public NonSerializableSecurityContext()
public NonSerializableSecurityContext(org.acegisecurity.Authentication authentication)
public org.acegisecurity.Authentication getAuthentication()
getAuthentication
in interface org.acegisecurity.context.SecurityContext
public void setAuthentication(org.acegisecurity.Authentication authentication)
setAuthentication
in interface org.acegisecurity.context.SecurityContext
Copyright © 2017. All rights reserved.