Additional cautious finally block

dsyer · dsyer · commit b3f9dbfe0c31 · 2025-08-19T07:28:10.000+01:00
diff --git a/spring-grpc-core/src/main/java/org/springframework/grpc/server/security/AuthenticationProcessInterceptor.java b/spring-grpc-core/src/main/java/org/springframework/grpc/server/security/AuthenticationProcessInterceptor.java
@@ -93,7 +93,11 @@ else if (user == null || !user.isAuthenticated()) {
 		}
 
 		SecurityContext currentContext = SecurityContextHolder.getContext();
-		return new SecurityContextClearingListener<>(next.startCall(call, headers), currentContext);
+		try {
+			return new SecurityContextClearingListener<>(next.startCall(call, headers), currentContext);
+		} finally {
+			SecurityContextHolder.clearContext();
+		}
 	}
 
 	static class SecurityContextClearingListener<ReqT> extends SimpleForwardingServerCallListener<ReqT> {

Original file line number	Diff line number	Diff line change
`@@ -93,7 +93,11 @@ else if (user == null \|\| !user.isAuthenticated()) {`
`93`	`93`	`}`
`94`	`94`
`95`	`95`	`SecurityContext currentContext = SecurityContextHolder.getContext();`
`96`		`- return new SecurityContextClearingListener<>(next.startCall(call, headers), currentContext);`
	`96`	`+ try {`
	`97`	`+ return new SecurityContextClearingListener<>(next.startCall(call, headers), currentContext);`
	`98`	`+ } finally {`
	`99`	`+ SecurityContextHolder.clearContext();`
	`100`	`+ }`
`97`	`101`	`}`
`98`	`102`
`99`	`103`	`static class SecurityContextClearingListener<ReqT> extends SimpleForwardingServerCallListener<ReqT> {`