浏览代码

Modified jaas sample's LoginModule to prevent empty string username/password

Rob Winch 14 年之前
父节点
当前提交
a50c9afbab
共有 1 个文件被更改,包括 3 次插入0 次删除
  1. 3 0
      samples/jaas/src/main/java/samples/jaas/UsernameEqualsPasswordLoginModule.java

+ 3 - 0
samples/jaas/src/main/java/samples/jaas/UsernameEqualsPasswordLoginModule.java

@@ -71,6 +71,9 @@ public class UsernameEqualsPasswordLoginModule implements LoginModule {
         if (username == null || !username.equals(password)) {
             throw new LoginException("username is not equal to password");
         }
+        if("".equals(username)) {
+            throw new LoginException("username cannot be empty string");
+        }
 
         subject.getPrincipals().add(new UsernamePrincipal(username));
         return true;