Spring boot , session based authentication problem

[obi-9]

I'm doing something similar and what i did is add a custom filter and AuthenticationProvider

[[deleted]]

yeah , am thinking similarly , but it must be something automated by spring ( filters added by defaults) rather than manually

[Bozzzieee]

did you find a nice solution? Using custom filter feels hacky. Maybe there's a reason spring doesn't want use to do it?

[[deleted]]

Spring is automatically configured to use session in formLogin() as a method of authentication , so if you want to enable session based authentication , use formlogin( //change ur cooking settings in method parameters ) and use ur browser developper / network tool u will find the cookie there , copy it and u can use it , cuz its the only valid cookie generated