[SHIRO-157] RememberMeManager should no longer be consulted once a remembered identity is discovered

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.0.0
• Component/s: RememberMe, Subject
• Assignee: Unassigned
• Reporter: Les Hazlewood
• Created: 12/May/10 18:45
• Updated: 11/Jun/10 22:01
• Resolved: 14/May/10 05:13

Description

When discovering principals (PrincipalCollection) during Subject creation:

If there are no principals associated with the subject being constructed and principals are found from rememberMe, those principals should be added to the session to ensure they can be retrieved from the session on later requests. It is better to acquire this from the session so the RememberMeManager overhead (decryption and/or deserialization) is not incurred unnecessarily for every request.