User restrictions do not work

[gotomanners]

I've just noticed that restrictions applied to user accounts such as

• User enabled
• Account expired
• Account Locked
• Password expired

Do not work. The user is still able to sign in with all of these properties enabled. Any input on this?

[splix]

Hm, all this properties must be processed by spring-security-core. I'll take a look.

Maybe you can provide more details, like domains structure, etc?

[gotomanners]

I've tested that those properties work correctly on user accounts created via the core username/password mechanism.

My domain structure is basic. The structure set up in your s2-facebook-example project.