Package de.hybris.platform.servicelayer.security.spring
package de.hybris.platform.servicelayer.security.spring
-
ClassDescriptionThis implementation copies username and password, converts all user groups to
GrantedAuthoritys and puts them into aUsernamePasswordAuthenticationToken.Deprecated, for removal: This API element is subject to removal in a future version.since agesDeprecated, for removal: This API element is subject to removal in a future version.since ages - see PLA-10801 -- validates 'best practice pattern' of seperating 'authentication' from 'authorization' and isn't flexible enough.Session fixation attacks are a potential risk where it is possible for a malicious attacker to create a session by accessing a site, then persuade another user to log in with the same session (by sending them a link containing the session identifier as a parameter, for example).Converts a hybrisUserModelto a Spring SecurityAuthenticationobject.