Ver Fonte

Temporarily disable anonymous WebFlux Logout

Work around LogoutWebFilter always intercepting requests

Issue gh-4540
Rob Winch há 8 anos atrás
pai
commit
5baf71f4a0

+ 0 - 1
webflux/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFiter.java

@@ -48,7 +48,6 @@ public class LogoutWebFiter implements WebFilter {
 			.filter( result -> result.isMatch())
 			.switchIfEmpty(chain.filter(exchange).then(Mono.empty()))
 			.flatMap( result -> exchange.getPrincipal().cast(Authentication.class))
-			.defaultIfEmpty(this.anonymousAuthenticationToken)
 			.flatMap( authentication -> this.logoutHandler.logout(new WebFilterExchange(exchange, chain), authentication));
 	}
 }