You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The example configuration in the Javadoc for the jee() method in HttpSecurity incorrectly demonstrates that the parameters for mappableRoles() are prefixed with "ROLE_".
The method implementation of mappableRoles() adds the prefix "ROLE_" to any parameter, therefore if a user were to use the demonstrated configuration, then the list of mappableRoles would be ["ROLE_ROLE_USER", "ROLE_ROLE_ADMIN"].
Actual Behavior
The Javadoc states that mappableRoles are configured as follows:
Summary
The example configuration in the Javadoc for the
jee()
method inHttpSecurity
incorrectly demonstrates that the parameters formappableRoles()
are prefixed with "ROLE_".The method implementation of
mappableRoles()
adds the prefix "ROLE_" to any parameter, therefore if a user were to use the demonstrated configuration, then the list ofmappableRoles
would be["ROLE_ROLE_USER", "ROLE_ROLE_ADMIN"]
.Actual Behavior
The Javadoc states that
mappableRoles
are configured as follows:Expected Behavior
The Javadoc should provide the following example configuration:
The text was updated successfully, but these errors were encountered: