Ben, > Yes, I agree it's worthwhile to have the User object available from an > Authentication. I think we got to the point of agreeing it would be > returned from Authentication.getCredentials() and I asked if this would > cause concerns for anybody. I didn't receive any feedback, so I will go > ahead with this change.
I'm sure you wanted to write Authentication.getPrincipal() as the right place for returning the User object instead of Authentication.getCredentials() . I'm just mentioning this to not confuse other people. Regards, Karel ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Acegisecurity-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer