AbstractCredentialHandler.configureDefaultSupportedAccountTypes() should not auto-add User and Agent to the list of supported account types. The below exception occurs when trying to authenticate with an invalid username. I'm not sure what the correct behavior is supposed to be in that case, but the fact that User and Agent are auto-added causes PL to throw a generic AuthenticationException, which makes it impossible to distinguish a normal error (the user doesn't exist) from a serious problem.
|