[JBoss JIRA] (SECURITY-991) NPE When registering null AuthConfigProvider on JBossAuthConfigFactory
by Stefan Guilhen (JIRA)
[ https://issues.jboss.org/browse/SECURITY-991?page=com.atlassian.jira.plug... ]
Stefan Guilhen closed SECURITY-991.
-----------------------------------
Resolution: Done
PR has been merged upstream
> NPE When registering null AuthConfigProvider on JBossAuthConfigFactory
> ----------------------------------------------------------------------
>
> Key: SECURITY-991
> URL: https://issues.jboss.org/browse/SECURITY-991
> Project: PicketBox
> Issue Type: Bug
> Components: JBossSX
> Affects Versions: PicketBox_5_1_0.Final
> Reporter: Darran Lofthouse
> Assignee: Ilia Vassilev
> Fix For: PicketBox_5_1_1.Beta1
>
>
> The following NPE is reported where the AuthConfigProvider is null: -
> {noformat}
> 2018-06-11 02:56:31,054 ERROR [stderr] (default task-1) java.lang.NullPointerException
> 2018-06-11 02:56:31,055 ERROR [stderr] (default task-1) at java.util.concurrent.ConcurrentHashMap.putVal(ConcurrentHashMap.java:1011)
> 2018-06-11 02:56:31,055 ERROR [stderr] (default task-1) at java.util.concurrent.ConcurrentHashMap.put(ConcurrentHashMap.java:1006)
> 2018-06-11 02:56:31,055 ERROR [stderr] (default task-1) at org.jboss.security.auth.message.config.JBossAuthConfigFactory.registerConfigProvider(JBossAuthConfigFactory.java:250)
> {noformat}
> However within JASPIC the null AuthConfigProvider has special meaning.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (SECURITY-993) SimpleRole.hashCode NPE when a principal has the roles set to null
by Stefan Guilhen (JIRA)
[ https://issues.jboss.org/browse/SECURITY-993?page=com.atlassian.jira.plug... ]
Stefan Guilhen resolved SECURITY-993.
-------------------------------------
Resolution: Done
PR has been merged upstream
> SimpleRole.hashCode NPE when a principal has the roles set to null
> ------------------------------------------------------------------
>
> Key: SECURITY-993
> URL: https://issues.jboss.org/browse/SECURITY-993
> Project: PicketBox
> Issue Type: Bug
> Components: Identity
> Affects Versions: PicketBox_5_1_0.Final
> Environment: Wild Fly Swarm 2018.2.0
> Reporter: Sergey Beryozkin
> Assignee: Ilia Vassilev
> Priority: Minor
> Fix For: PicketBox_5_1_1.Beta1
>
>
> If a principal is created with the roles set to null then NPE is reported back to the user during the authentication process:
> {noformat}
> java.lang.RuntimeException: java.lang.NullPointerException
> at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verifyCredential(JAASIdentityManagerImpl.java:140)
> at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verify(JAASIdentityManagerImpl.java:94)
> at io.undertow.security.impl.BasicAuthenticationMechanism.authenticate(BasicAuthenticationMechanism.java:167)
> at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:245)
> ....
> Caused by: java.lang.NullPointerException
> at org.jboss.security.identity.plugins.SimpleRole.hashCode(SimpleRole.java:106)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month
[JBoss JIRA] (SECURITY-993) SimpleRole.hashCode NPE when a principal has the roles set to null
by Stefan Guilhen (JIRA)
[ https://issues.jboss.org/browse/SECURITY-993?page=com.atlassian.jira.plug... ]
Stefan Guilhen closed SECURITY-993.
-----------------------------------
> SimpleRole.hashCode NPE when a principal has the roles set to null
> ------------------------------------------------------------------
>
> Key: SECURITY-993
> URL: https://issues.jboss.org/browse/SECURITY-993
> Project: PicketBox
> Issue Type: Bug
> Components: Identity
> Affects Versions: PicketBox_5_1_0.Final
> Environment: Wild Fly Swarm 2018.2.0
> Reporter: Sergey Beryozkin
> Assignee: Ilia Vassilev
> Priority: Minor
> Fix For: PicketBox_5_1_1.Beta1
>
>
> If a principal is created with the roles set to null then NPE is reported back to the user during the authentication process:
> {noformat}
> java.lang.RuntimeException: java.lang.NullPointerException
> at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verifyCredential(JAASIdentityManagerImpl.java:140)
> at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verify(JAASIdentityManagerImpl.java:94)
> at io.undertow.security.impl.BasicAuthenticationMechanism.authenticate(BasicAuthenticationMechanism.java:167)
> at io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:245)
> ....
> Caused by: java.lang.NullPointerException
> at org.jboss.security.identity.plugins.SimpleRole.hashCode(SimpleRole.java:106)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
8 years, 1 month