The SPNEGO authentication mechanism will cache a resulting SecurityIdentity with the HTTP session along with any delegated credentials.
Subsequent requests are assumed authenticated even if the delegated credential has expired.
If the delegated credential has expired SPNEGO authentication should begin again to refresh the delegated credential.
- clones
-
ELY-2959 The SPNEGO Authentication Mechanism should check the remaining life of any delgated credentials
-
- Open
-