If the session is null, the context object is null or the context object stored in the session is not an instance of {@code SecurityContext}, a new context object will be generated and returned.
The use of the HttpRequestResponseHolder parameter allows implementations to return wrapped versions of the request or response (or both), allowing them to access implementation-specific state for the request. The values obtained from the holder will be passed on to the filter chain and also to the saveContext method when it is finally called. Implementations may wish to return a subclass of {@link SaveContextOnUpdateOrErrorResponseWrapper} as the response object, which guarantees that the context ispersisted when an error or redirect occurs. @param requestResponseHolder holder for the current request and response for which the context should be loaded. @return The security context which should be used for the current request, never null.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|