[infinispan-issues] [JBoss JIRA] (ISPN-6258) Authorication can fail with NPE when no subject is provided

[Vojtech Juranek (JIRA)]

Vojtech Juranek created ISPN-6258:
-------------------------------------

             Summary: Authorication can fail with NPE when no subject is provided
                 Key: ISPN-6258
                 URL: https://issues.jboss.org/browse/ISPN-6258
             Project: Infinispan
          Issue Type: Bug
          Components: Security
            Reporter: Vojtech Juranek
            Assignee: Vojtech Juranek


When user's subject is null, authorization on secured cache can fail with NPE bellow, instead of logging {{SecurityException}}

{noformat}
15:14:47,795 ERROR [org.infinispan.server.hotrod.HotRodEncoder] (HotRodServerWorker-9-1) ISPN005022: Exception writing response with messageId=2: java.lang.NullPointerException                                                             
        at org.infinispan.security.impl.CachePrincipalPair.<init>(CachePrincipalPair.java:17)                                                                                                                                                
        at org.infinispan.security.impl.AuthorizationHelper.checkSubjectPermissionAndRole(AuthorizationHelper.java:103)                                                                                                                      
        at org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:76)                                                                                                                                     
        at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:37)                                                                                                                           
{noformat}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)