From 5baf71f4a0a096daa5ff5259566a73b2bf892c66 Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Wed, 13 Sep 2017 16:56:07 -0500 Subject: [PATCH] Temporarily disable anonymous WebFlux Logout Work around LogoutWebFilter always intercepting requests Issue gh-4540 --- .../web/server/authentication/logout/LogoutWebFiter.java | 1 - 1 file changed, 1 deletion(-) diff --git a/webflux/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFiter.java b/webflux/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFiter.java index 9950a04ca5..ecdce387b8 100644 --- a/webflux/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFiter.java +++ b/webflux/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFiter.java @@ -48,7 +48,6 @@ public class LogoutWebFiter implements WebFilter { .filter( result -> result.isMatch()) .switchIfEmpty(chain.filter(exchange).then(Mono.empty())) .flatMap( result -> exchange.getPrincipal().cast(Authentication.class)) - .defaultIfEmpty(this.anonymousAuthenticationToken) .flatMap( authentication -> this.logoutHandler.logout(new WebFilterExchange(exchange, chain), authentication)); } }