SOAPClientAuthModule - Unwritten field credential ------------------------------------------------- Key: JBWS-3952 URL: https://issues.jboss.org/browse/JBWS-3952 Project: JBoss Web Services Issue Type: Bug Reporter: Rostislav Svoboda Assignee: Jim Ma Fix For: jbossws-cxf-5.2.0.Final There is unwritten field credential in SOAPClientAuthModule.java file, strange is that it's used in cleanSubject method. Seems like bug / unnecessary filed. https://github.com/jbossws/jbossws-cxf/blob/master/modules/jaspi/src/main... private Object credential = null; https://github.com/jbossws/jbossws-cxf/blob/master/modules/jaspi/src/main... subject.getPublicCredentials().remove(credential);