[KARAF-3459] PropertiesLoginModule throws NPE when callbackHandler is null

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.3, 4.0.0.M2, 4.0.0.M3
• Component/s: karaf
• Assignee: Christian Schneider
• Reporter: Christian Schneider
• Created: 21/Jan/15 14:56
• Updated: 15/Sep/18 05:45
• Resolved: 21/Jan/15 15:36

Description

That CXF JAASLoginInterceptor calls JAAS with a null CallBackhandler if no credentials are found. This results in a LoginException wrapping a NPE which is a bit cryptic for users.

I propose to check for null in PropertiesLoginModule and just not call the callBackHandler in this case. Then it will look like the user and password are null which result in a better exception.