[jboss-jira] [JBoss JIRA] (WFCORE-2455) Empty secret-value is not allowed in credential stores

Empty secret-value is not allowed in credential stores ------------------------------------------------------- Key: WFCORE-2455 URL: https://issues.jboss.org/browse/WFCORE-2455 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Josef Cacek Assignee: Darran Lofthouse Priority: Critical Labels: credential-store It's not possible to add an entry with empty secret-value into a credential store. Masking the fact the password is empty is a valid scenario. {code} [standalone@localhost:9990 /] /subsystem=elytron/credential-store=cred-store-default/alias=emptysecret:add() { "outcome" => "failed", "failure-description" => "WFLYCTL0155: 'secret-value' may not be null", "rolled-back" => true } [standalone@localhost:9990 /] /subsystem=elytron/credential-store=cred-store-default/alias=emptysecret:add(secret-value="") { "outcome" => "failed", "failure-description" => "WFLYCTL0113: '' is an invalid value for parameter secret-value. Values must have a minimum length of 1 characters", "rolled-back" => true } {code}