浏览代码

Removed comment about status checking as it is not entirely correct and misleads people.

Luke Taylor 17 年之前
父节点
当前提交
a43d054bd7

+ 0 - 2
core/src/main/java/org/springframework/security/providers/dao/AbstractUserDetailsAuthenticationProvider.java

@@ -133,8 +133,6 @@ public abstract class AbstractUserDetailsAuthenticationProvider implements Authe
 
         preAuthenticationChecks.check(user);
         
-        // This check must come here, as we don't want to tell users
-        // about account status unless they presented the correct credentials
         try {
             additionalAuthenticationChecks(user, (UsernamePasswordAuthenticationToken) authentication);
         } catch (AuthenticationException exception) {