Modified jaas sample's LoginModule to prevent empty string username/password
This commit is contained in:
parent
9e5d35235c
commit
a50c9afbab
|
@ -71,6 +71,9 @@ public class UsernameEqualsPasswordLoginModule implements LoginModule {
|
|||
if (username == null || !username.equals(password)) {
|
||||
throw new LoginException("username is not equal to password");
|
||||
}
|
||||
if("".equals(username)) {
|
||||
throw new LoginException("username cannot be empty string");
|
||||
}
|
||||
|
||||
subject.getPrincipals().add(new UsernamePrincipal(username));
|
||||
return true;
|
||||
|
|
Loading…
Reference in New Issue