ServerAuthenticationContext callback handler special handling for AuthorizeCallback ----------------------------------------------------------------------------------- Key: ELY-233 URL: https://issues.jboss.org/browse/ELY-233 Project: WildFly Elytron Issue Type: Task Components: API / SPI Reporter: David Lloyd Fix For: 1.0.0.Alpha5 The ServerAuthenticationContext's callback handler implementation currently handles each callback in order. It should instead handle all callbacks in order *except* for the AuthorizeCallback, which it should handle last. This will make it somewhat resilient against SASL server mechanisms (and other server mechanisms) which incorrectly send in the authorize callback before finishing authentication.