Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-21737

[GSS](7.3.z) ELYWEB-133 - SecurityContextImpl.login incorrectly assumes authenticate would be called first.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 7.3.8.CR1, 7.3.8.GA
    • None
    • Security
    • None

      The login method assumes the httpAuthenticator will have already been set:

          @Override
    public boolean login(String username, String password) {
        if (httpAuthenticator == null) {
            log.trace("No HttpAuthenticator available for authentication.");
            return false;
        }

      Instead we should adjust the code so the HttpAuthenticator will be created on demand for whichever method needs it first.

        1. simple-webapp.zip
          63 kB

            rhn-engineering-lgao Lin Gao
            rhn-support-bmaxwell Brad Maxwell
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: