[jira] [Updated] (OAK-11610) Clarify javadoc of o.a.j.api.security.user.UserManager.createUser() with respect to null passwords

["Konrad Windszus (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OAK-11610?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Konrad Windszus updated OAK-11610:
----------------------------------
    Summary: Clarify javadoc of o.a.j.api.security.user.UserManager.createUser() with respect to null passwords  (was: Clarify javadoc of o.a.j.api.security.user.UserManager.createUser())

> Clarify javadoc of o.a.j.api.security.user.UserManager.createUser() with respect to null passwords
> --------------------------------------------------------------------------------------------------
>
>                 Key: OAK-11610
>                 URL: https://issues.apache.org/jira/browse/OAK-11610
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: jackrabbit-api
>    Affects Versions: 1.76.0
>            Reporter: Konrad Windszus
>            Priority: Major
>
> Currently the javadoc in https://github.com/apache/jackrabbit-oak/blob/709fab2f6506336e6eb0002257bee125d689d9ef/oak-jackrabbit-api/src/main/java/org/apache/jackrabbit/api/security/user/UserManager.java#L170-L171 states
> bq. Creates an User for the given userID / password pair; neither of the specified parameters can be null
> However the {{password}} parameter is explicitly marked as {{Nullable}}. 
> So is null allowed or not? If yes, what happens if null is passed. Can one authenticate then without providing a password?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)