SAML relying party logout filter is always ordered last #14525
Labels
in: saml2
An issue in SAML2 modules
status: duplicate
A duplicate of another issue
type: bug
A general bug
When configuring the SAML logout configuration the LogoutFilter is ordered last. It turns out that the
org.springframework.security.config.annotation.web.configurers.saml2.Saml2LogoutConfigurer
configures a standardorg.springframework.security.web.authentication.logout.LogoutFilter
and tries to order it before an already existingorg.springframework.security.web.authentication.logout.LogoutFilter
which doesn't have any effect and the added filter isn't ordered before the existing filter. My solution was to just extend theorg.springframework.security.web.authentication.logout.LogoutFilter
and add that instead so the ordering works.The text was updated successfully, but these errors were encountered: