NPE in AbstractMechanismAuthenticationFactory --------------------------------------------- Key: ELY-575 URL: https://issues.jboss.org/browse/ELY-575 Project: WildFly Elytron Issue Type: Bug Components: Authentication Mechanisms, SASL Reporter: David Lloyd Assignee: David Lloyd The SaslAuthenticationFactory sublcass of AbstractMechanismAuthenticationFactory is using org.wildfly.security.sasl.util.SaslMechanismInformation#getSupportedServerCredentialTypes() to determine what credentials are available. But, that method returns null if nothing is known about that mechanism name. AbstractMechanismAuthenticationFactory doesn't check for null in the returned collection, and so NPE results which is uncaught and can cause hangs and other problems.