[jboss-user] [Security & JAAS/JBoss] - Re: NPE in ExtendedFormAuthenticator

[leegreiner]

This was our solution:


  | package edu.duke.dcri.web.tomcat.security;
  | 
  | import java.io.IOException;
  | import org.apache.catalina.connector.Request;
  | import org.apache.catalina.connector.Response;
  | import org.apache.catalina.deploy.LoginConfig;
  | 
  | public class ExtendedFormAuthenticator extends org.jboss.web.tomcat.security.ExtendedFormAuthenticator
  | {
  | 
  |     public ExtendedFormAuthenticator()
  |     {
  |     }
  | 
  |     public boolean authenticate(Request request, Response response, LoginConfig config)
  |         throws IOException
  |     {
  |         boolean alreadyAuthenticated = false;
  |         try
  |         {
  |             alreadyAuthenticated = super.authenticate(request, response, config);
  |         }
  |         catch(NullPointerException npe) { }
  |         return alreadyAuthenticated;
  |     }
  | }
  | 

When the NullPointerException is raised there is no session and the authenticator returns false, the desired effect.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4163364#4163364

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4163364