Skip to content

Commit 23594b3

Browse files
Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator
Issue gh-10908
1 parent 97acbcc commit 23594b3

File tree

1 file changed

+4
-1
lines changed
  • config/src/main/java/org/springframework/security/config/annotation/web/builders

1 file changed

+4
-1
lines changed

config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurity.java

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -357,7 +357,10 @@ private RequestMatcherEntry<List<WebInvocationPrivilegeEvaluator>> getRequestMat
357357
if (filter instanceof AuthorizationFilter) {
358358
AuthorizationManager<HttpServletRequest> authorizationManager = ((AuthorizationFilter) filter)
359359
.getAuthorizationManager();
360-
privilegeEvaluators.add(new AuthorizationManagerWebInvocationPrivilegeEvaluator(authorizationManager));
360+
AuthorizationManagerWebInvocationPrivilegeEvaluator evaluator = new AuthorizationManagerWebInvocationPrivilegeEvaluator(
361+
authorizationManager);
362+
evaluator.setServletContext(this.servletContext);
363+
privilegeEvaluators.add(evaluator);
361364
}
362365
}
363366
return new RequestMatcherEntry<>(securityFilterChain::matches, privilegeEvaluators);

0 commit comments

Comments
 (0)