HttpSessionContextIntegrationFilter

[spurcell]

Hello,

After user logs in (gets 'principal', 'credentials', and 'autnorities') in the Authentication object, and if I am using the HttpSessionContextIntegrationFilter, how does this information persist? I assume that this filter is setting setAttribute in the session? Correct? If this is the case, what is the name for the key? Or is it a dynamic key?

[karldmoore]

Just need to look at the source for the class you named.

public static final String ACEGI_SECURITY_CONTEXT_KEY = "ACEGI_SECURITY_CONTEXT";

httpSession.setAttribute(ACEGI_SECURITY_CONTEXT_KEY, SecurityContextHolder.getContext());