Missing null checks in auth client lead to NPEs later on -------------------------------------------------------- Key: ELY-1272 URL: https://issues.jboss.org/browse/ELY-1272 Project: WildFly Elytron Issue Type: Bug Components: API / SPI, Authentication Client Reporter: David Lloyd Assignee: Stuart Douglas Fix For: 1.1.0.CR3 There are missing null checks in at least the following places: * The constructor of org.wildfly.security.auth.principal.NamePrincipal which should require "name" to be non-null * The name argument to org.wildfly.security.auth.client.AuthenticationConfiguration#useName In addition, the following places handle null wrongly: * org.wildfly.security.auth.client.AuthenticationConfiguration#useAuthorizationName should check name for null, and if it is null, pass null in to useAuthorizationPrincipal