Digest-MD5 authorization check is incorrect ------------------------------------------- Key: ELY-100 URL: https://issues.jboss.org/browse/ELY-100 Project: WildFly Elytron Issue Type: Bug Components: SASL Reporter: David Lloyd Assignee: Peter Skopek In MD5DigestSaslServer.java line 232-233 we have this code: {code} byte[] authzid = parsedDigestResponse.get("authzid"); String authorizationId = (authzid==null || authzid.equals(userName)) ? null : new String(authzid, Charsets.UTF_8); {code} The {{equals}} compare between {{authzid}} (a byte array) and {{userName}} (a String) is invalid. However if I fix it in the obvious manner, tests fail.