ACS-284: AuthenticationUtil.runAs method should leave the security context as it found it

This commit is contained in:
Cristian Turlica
2020-06-02 09:35:52 +03:00
committed by GitHub
parent 6c30c346aa
commit 26957cd5f7

View File

@@ -618,7 +618,13 @@ public class AuthenticationUtil implements InitializingBean
{
if (originalFullAuthentication == null)
{
AuthenticationUtil.clearCurrentSecurityContext();
if (logger.isTraceEnabled())
{
logger.trace("Removing the current security information for thread: " + Thread.currentThread().getName());
}
ContextHolder.setContext(null);
TenantContextHolder.clearTenantDomain();
logNDC(null);
}
else