do not pass the getCredentials() call to the delegated Authentication object on a GeorchestraUserNamePasswordAuthenticationToken, returning null instead.
Tests: added a utest, make test OK, runtime test on the default docker composition at the root of the repository.
Note: I am not sure if we need to check other Authentication objects that the configuration could allow. In case of preauthentication via headers or oauth2, we won't have the information anyway, but what about other pure spring security objects ?
do not pass the
getCredentials()call to the delegatedAuthenticationobject on aGeorchestraUserNamePasswordAuthenticationToken, returningnullinstead.Tests: added a utest, make test OK, runtime test on the default docker composition at the root of the repository.
Note: I am not sure if we need to check other Authentication objects that the configuration could allow. In case of preauthentication via headers or oauth2, we won't have the information anyway, but what about other pure spring security objects ?