@anilsaldhana
Anil Saldhana wrote:
Unless we get JASPI rock solid as a specification and get people to actually get into that mode, we cannot just make it the default.
One issue that I encountered that seems spec related, is that JASPIC modules do not seem to get invoked whenever HttpServletRequest#login is called. Anil, do you know anything about this? Is this a spec loophole?