This is an automated email from the ASF dual-hosted git repository.

lprimak pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro-site.git


The following commit(s) were added to refs/heads/main by this push:
     new 0c5c78b39 enh: added warnIfAuthenticatorFailed flag and 
AuthenticationExceptionEvent documentation for AtLeastOneSuccessfulStrategy in 
3.0
0c5c78b39 is described below

commit 0c5c78b39c1f22ba8e3e22244692cb3be8dc3ff1
Author: lprimak <[email protected]>
AuthorDate: Wed Jun 17 22:04:27 2026 -0500

    enh: added warnIfAuthenticatorFailed flag and AuthenticationExceptionEvent 
documentation for AtLeastOneSuccessfulStrategy in 3.0
---
 src/site/content/authentication.adoc | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/site/content/authentication.adoc 
b/src/site/content/authentication.adoc
index d1570b2f3..71570e394 100644
--- a/src/site/content/authentication.adoc
+++ b/src/site/content/authentication.adoc
@@ -316,6 +316,16 @@ securityManager.authenticator.authenticationStrategy = 
$authcStrategy
 ...
 ----
 
+Since Shiro 3.0.0, `AtLeastOneSuccessfulStrategy` will warn if authentication 
attempt fails due to a system error (e.g. a database connection failure) 
instead of an actual authentication failure (e.g. incorrect password). This is 
because in a multi-realm environment, it can be difficult to determine if an 
authentication failure was due to an actual authentication failure or a system 
error. In addition to the warning, an `AuthenticationExceptionEvent` will be 
published to the `EventBus` w [...]
+
+[source,ini]
+.Here is an example of shiro.ini which works only when 
`AtLeastOneSuccessfulStrategy` is used
+----
+[main]
+...
+securityManager.authenticator.authenticationStrategy.warnIfAuthenticatorFailed 
= false
+----
+
 [TIP]
 ====
 .Custom AuthenticationStrategy

Reply via email to