i noticed in the changelogs a recent issue sec-1742 (which i cannot access anonymously in jira) that AuthenticationException.extraInformation is deprecated.
i currently have a setup where i override onAuthenticationFailure() in my custom AuthenticationFailureHandler to keep track of failed authentication count. i use the badcredentialsexception.getExtraInformation() to access the user details object. my implementation of my userdetails object has a field that keeps track of the count of bad authentication attempts.
so here's my question: given that extrainformation is now deprecated and presumably going away, how do i obtain a reference to my userdetails object from inside the onAuthenticationFailure() method:?
thanks,Code:public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException