Skip to content

InitializeUserDetailsBeanManagerConfigurer should use Constructor Injection #14691

Closed
@rwinch

Description

@rwinch

The InitializeUserDetailsBeanManagerConfigurer should inject the PasswordEncoder into the constructor of DaoAuthenticationProvider to prevent the unnecessary execution of PasswordEncoderFactories.createDelegatingPasswordEncoder() which causes issues for users with FIPS compliant JDKs. See #14670

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions