Petter Holmström

Please have a look at this blog post: https://vaadin.com/blog/-/blogs/filter-based-spring-security-in-vaadin-applications

The root problem is that you are trying to access the HTTP request while using Websocket communication, during which no HTTP requests exist at all. I also noticed you are...

Here are some really quick answers, hope they help you in some way: a) I think Spring creates a new session after authentication to protect against session fixation. That might...

You can start by looking through these classes: https://github.com/peholmst/vaadin4spring/tree/master/addons/eventbus/src/main/java/org/vaadin/spring/events/internal

It sounds like something that should be managed within the application itself, but I can see if there is any way the framework could help with this.

Yes, we will add support for Apache Shiro as well, but after Spring Security support has been added.

No, leave it open. At some point it should be possible to use Apache Shiro as well. The Vaadin4Spring add-on must not force the use of Spring Security, even though...

@russelljtdyer This PR is now ready for a second round of edits.