Re: RFR: 8282730: LdapLoginModule throw NPE from logout method after login failure [v3]

2022-07-18 Thread Weijun Wang
On Sat, 16 Jul 2022 13:46:58 GMT, Weijun Wang wrote: >> Add null-checks in all `LoginModule` implementations. It's possible that an >> application calls `logout` after a login failure, where most internal >> variables for principals and credentials are null and removing a null from >> the `Sub

Re: RFR: 8282730: LdapLoginModule throw NPE from logout method after login failure [v3]

2022-07-18 Thread Sean Mullan
On Sat, 16 Jul 2022 13:46:58 GMT, Weijun Wang wrote: >> Add null-checks in all `LoginModule` implementations. It's possible that an >> application calls `logout` after a login failure, where most internal >> variables for principals and credentials are null and removing a null from >> the `Sub

Re: RFR: 8282730: LdapLoginModule throw NPE from logout method after login failure [v3]

2022-07-16 Thread Weijun Wang
> Add null-checks in all `LoginModule` implementations. It's possible that an > application calls `logout` after a login failure, where most internal > variables for principals and credentials are null and removing a null from > the `Subject`'s principals and credentials sets will trigger a > `