Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
1.0.3
-
None
-
None
-
None
Description
The following code in AuthenticationFilter#doFilter throws AuthenticationException (and warns) unconditionally because KerberosAuthenticator#authenticate returns null if SPNEGO is used.
token = authHandler.authenticate(httpRequest, httpResponse); ... if (token != null) { ... } else { throw new AuthenticationException }