[jboss-jira] [JBoss JIRA] (WFLY-3416) NPE in Undertow Extension if login module doesn't set Principal

[Josef Cacek (JIRA)]

Josef Cacek created WFLY-3416:
---------------------------------

             Summary: NPE in Undertow Extension if login module doesn't set Principal
                 Key: WFLY-3416
                 URL: https://issues.jboss.org/browse/WFLY-3416
             Project: WildFly
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Web (Undertow)
    Affects Versions: 8.1.0.CR2
            Reporter: Josef Cacek
            Assignee: Stuart Douglas


NPE is thrown during authentication if a LoginModule doesn't set any principal to the Subject.

The problem comes from {{org.wildfly.extension.undertow.security.AccountImpl}} constructor call {{principal.getName()}}.

{code}
Caused by: java.lang.NullPointerException
at org.wildfly.extension.undertow.security.AccountImpl.<init>(AccountImpl.java:61)
at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verifyCredential(JAASIdentityManagerImpl.java:123)
...
{code}



--
This message was sent by Atlassian JIRA
(v6.2.3#6260)