Why is explicit caching needed?

[seemamani]

Acegi documentation says "Acegi Security integrates with Spring's EHCACHE factory. This flexibility means your database (or other authentication repository) is not repeatedly queried for authentication information."

The authentication object is anyway cached in session, so why is EhCache required?

Thanks,
Seema

[Luke Taylor]

It isn't required, but not all applications use Http sessions.