private String findRememberMeCookieValue ( HttpServletRequest request , HttpServletResponse response ) { Cookie [ ] cookies = request . getCookies ( ) ; if ( ( cookies == null ) || ( cookies . length == 0 ) ) { return null ; } for ( Cookie cookie : cookies ) { if ( ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY . equals ( cookie . getName ( ) ) ) { return cookie . getValue ( ) ; } } return null ; }
Patched version of the super . autoLogin with a time - independent equality check for the token validation