You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A more sensible default would be onRequest, which is early enough to guarantee that no unnecessary operations are done on a request that's eventually going to be forbidden by authorization rules.
Clearly, if that becomes the default, any logic which needs to happen before authorization also needs to happen earlier in the request lifecycle. The examples and example application need to change to do authentication earlier (onRequest VS preValidation)
The text was updated successfully, but these errors were encountered:
Currently,
preHandler
is used.A more sensible default would be
onRequest
, which is early enough to guarantee that no unnecessary operations are done on a request that's eventually going to be forbidden by authorization rules.Clearly, if that becomes the default, any logic which needs to happen before authorization also needs to happen earlier in the request lifecycle. The examples and example application need to change to do authentication earlier (onRequest VS preValidation)
The text was updated successfully, but these errors were encountered: