[jboss-jira] [JBoss JIRA] (ELY-1007) Exception in authenticate() method of SecurityContextImpl is hidden

[Ondrej Lukas (JIRA)]

Ondrej Lukas created ELY-1007:
---------------------------------

             Summary: Exception in authenticate() method of SecurityContextImpl is hidden
                 Key: ELY-1007
                 URL: https://issues.jboss.org/browse/ELY-1007
             Project: WildFly Elytron
          Issue Type: Bug
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse
            Priority: Critical


In case when {{authenticator.authenticate()}} in {{authenticate()}} method of {{org.wildfly.elytron.web.undertow.server.SecurityContextImpl}} [1] throws exception, then this exception is hidden and only internal server error status is returned. Thrown exception should be logged.

This issue can be cause of JBEAP-9377.

[1] https://github.com/wildfly-security/elytron-web/blob/49241df4afcc37158c54959fd52b8b5b619f2209/undertow/src/main/java/org/wildfly/elytron/web/undertow/server/SecurityContextImpl.java#L97



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)