[jboss-jira] [JBoss JIRA] (WFLY-3416) NPE in Undertow Extension if login module doesn't set Principal

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-3416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse reassigned WFLY-3416:
--------------------------------------

    Assignee: Darran Lofthouse  (was: Stuart Douglas)


> NPE in Undertow Extension if login module doesn't set Principal
> ---------------------------------------------------------------
>
>                 Key: WFLY-3416
>                 URL: https://issues.jboss.org/browse/WFLY-3416
>             Project: WildFly
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Web (Undertow)
>    Affects Versions: 8.1.0.CR2
>            Reporter: Josef Cacek
>            Assignee: Darran Lofthouse
>
> NPE is thrown during authentication if a LoginModule doesn't set any principal to the Subject.
> The problem comes from {{org.wildfly.extension.undertow.security.AccountImpl}} constructor call {{principal.getName()}}.
> {code}
> Caused by: java.lang.NullPointerException
> at org.wildfly.extension.undertow.security.AccountImpl.<init>(AccountImpl.java:61)
> at org.wildfly.extension.undertow.security.JAASIdentityManagerImpl.verifyCredential(JAASIdentityManagerImpl.java:123)
> ...
> {code}



--
This message was sent by Atlassian JIRA
(v6.2.3#6260)