I know that if you use the <http> element in the Security namespace, the resulting FilterChainProxy will honor the configured order of the plugged in Filter(s).
However, i defined a FilterChainProxy bean, and the resulting execution order is the order in which they are defined.
Why isn't my FilterChainProxy honoring the order of the filters as the Ordered interface specifies? Here's my filter chain definition:
Each one of these filters is either the original filter with some replacement properties (for more fine tuned security) or a filter we defined but which extends from SpringSecurityFilter (and therefore must implement the Ordered interface).
<security:filter-chain-map path-type="regex" >
As you can see, my definition puts the sessionFixationProtectionFilter out of it's proper place. So when i go through the chain, it ends up as being filter 2 of 8, when it should be 6 of 8.
Can anyone see what i'm doing wrong? Or do I need to post more information?
Thanks in advance.