You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Rick Kellogg (JIRA)" <ji...@apache.org> on 2017/12/20 19:57:00 UTC

[jira] [Created] (KNOX-1152) Guard Against Missing Subject in Identity Assertion

Rick Kellogg created KNOX-1152:
----------------------------------

             Summary: Guard Against Missing Subject in Identity Assertion
                 Key: KNOX-1152
                 URL: https://issues.apache.org/jira/browse/KNOX-1152
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
    Affects Versions: 0.11.0, 0.12.0, 0.13.0, 0.14.0
            Reporter: Rick Kellogg
            Assignee: Rick Kellogg
            Priority: Minor


Within the CommonIdentityAssertionFilter class, it is possible the evaluation of the Subject can return null.  A check should be added for this, error logged and IllegalStateException exception thrown.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)