Loading...

XML

Word

Printable

Steps to Reproduce:

Hide

Install a custom realm with a suitable implementation of handleRealmEvent

create a servlet that initiates authentication by calling login on the HttpServletRequest

perform a successful authentication

note the events delivered to the custom realm.

Show
Install a custom realm with a suitable implementation of handleRealmEvent create a servlet that initiates authentication by calling login on the HttpServletRequest perform a successful authentication note the events delivered to the custom realm.
[QE] How to address?:
---
[QE] Why QE missed?:
---

After successful authentication during a call to HttpServletRequest.login(username,password) the SecurityRealm receives a

org.wildfly.security.auth.server.event.RealmFailedAuthenticationEvent

This appears to be due to org.wildfly.security.http.HttpAuthenticator.login not calling succeed() on the ServerAuthenticationContext.

adding

authenticationContext.succeed();

to the login method prior to returning the authorizedIdentity appears to fix the problem.

is caused by

ELY-2377 RealmFailedAuthenticationEvent triggered during successful http programmatic login