Question

i found some samples that implements remember me functionality by just

<remember-me/>

and other samples implement it as:

<remember-me key="_spring_security_remember_me"/>

and i want to know what is the difference between the two declarations, and is the _spring_security_remember_me is a predefined key?
thanks.

Answer 1

The default key can be found in AuthenticationConfigBuilder.createRememberMeFilter()

    final String DEF_KEY = "SpringSecured";

That is the value that is used if you don’t specify one in <remember-me>