It shall not throw out NPE when AAA service cannot find the user in the system

actframework / act-aaa-plugin

Use OSGL aaa library to mange Authentication/Authorization/Accounting for ActFramework Application

Apache License 2.0

6 stars 2 forks source link

It shall not throw out NPE when AAA service cannot find the user in the system #1

Closed greenlaw110 closed 7 years ago

greenlaw110 commented 7 years ago

At the moment when AAA tried to look up a user from username supplied but failed (might be cause the user record has been removed from app database) it throws out NPE.

The expected behavior is to clear current session and throw out 401 Unauthorized or 302 redirect (to login URL) based app's configuration.