The ExternalSaslServer.evaluateResponse returns empty byte array instead of null after successful authentication.

The contract says:

It is null if the authentication has succeeded and there is no more challenge data to be sent to the client.

Possible fix
Return null when authentication succeeds.