SEC-305: Retain SecurityContext when rendering error pages.

2007-05-24 02:04:47 +00:00
parent 6ea8899134
commit 0736f4ffa0
2 changed files with 8 additions and 1 deletions
--- a/core/src/test/java/org/acegisecurity/context/HttpSessionContextIntegrationFilterTests.java
+++ b/core/src/test/java/org/acegisecurity/context/HttpSessionContextIntegrationFilterTests.java
@@ -139,6 +139,7 @@ public class HttpSessionContextIntegrationFilterTests extends TestCase {

        // Check the SecurityContextHolder is null, even though an exception was thrown during chain
        assertEquals(new SecurityContextImpl(), SecurityContextHolder.getContext());
+        assertNull("Should have cleared FILTER_APPLIED", request.getAttribute(HttpSessionContextIntegrationFilter.FILTER_APPLIED));
    }

    public void testExistingContextContentsCopiedIntoContextHolderFromSessionAndChangesToContextCopiedBackToSession()