Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-7474

Elytron SASL factories don't follow contract from corresponding Java interfaces

XMLWordPrintable

    • Hide

      Call methods of the Sasl*Factory classes with null parameters (where the contract allows it).

      You can use tests in SaslFactoriesApiTest.java for verification.

      Show
      Call methods of the Sasl*Factory classes with null parameters (where the contract allows it). You can use tests in SaslFactoriesApiTest.java for verification.

      Java SaslClientFactory and SaslServerFactory interfaces define where null parameters or null return values are allowed and which Exception types can be used in methods. Elytron implementation of SASL mechanisms doesn't follow this contract, which results in NullPointerExceptions.

      E.g.

      java.lang.NullPointerException
	at org.wildfly.security.sasl.scram.ScramSaslClientFactory.getMechanismNames(ScramSaslClientFactory.java:119)
...

              jkalina@redhat.com Jan Kalina (Inactive)
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Jan Kalina (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: