public AuthenticationInfo afterAllAttempts(AuthenticationToken token, AuthenticationInfo aggregate)
            throws AuthenticationException {
        return aggregate;
    }
Simply returns the <code>aggregate</code> argument without modification.  Can be overridden for custom behavior.
core/src/main/java/org/apache/shiro/authc/pam/AbstractAuthenticationStrategy.java