Log a warning if adding CredentialHandler to CombinedRealm

apache · Apr 20, 2020 · 65bc61a · 65bc61a
1 parent 6a313e9
commit 65bc61a
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 0 deletions.
diff --git a/java/org/apache/catalina/realm/CombinedRealm.java b/java/org/apache/catalina/realm/CombinedRealm.java
@@ -26,6 +26,7 @@
 import javax.management.ObjectName;
 
 import org.apache.catalina.Container;
+import org.apache.catalina.CredentialHandler;
 import org.apache.catalina.Lifecycle;
 import org.apache.catalina.LifecycleException;
 import org.apache.catalina.Realm;
@@ -461,4 +462,12 @@ public boolean isAvailable() {
         return true;
     }
 
+
+    @Override
+    public void setCredentialHandler(CredentialHandler credentialHandler) {
+        // This is unusual for a CombinedRealm as it does not use
+        // CredentialHandlers. It might be a mis-configuration so warn the user.
+        log.warn(sm.getString("combinedRealm.setCredentialHandler"));
+        super.setCredentialHandler(credentialHandler);
+    }
 }
diff --git a/java/org/apache/catalina/realm/LocalStrings.properties b/java/org/apache/catalina/realm/LocalStrings.properties
@@ -20,6 +20,7 @@ combinedRealm.authSuccess=Authenticated user [{0}] with realm [{1}]
 combinedRealm.getPassword=The getPassword() method should never be called
 combinedRealm.getPrincipal=The getPrincipal() method should never be called
 combinedRealm.realmStartFail=Failed to start [{0}] realm
+combinedRealm.setCredentialHandler=A CredentialHandler was set on an instance of the CombinedRealm (or a sub-class of CombinedRealm). CombinedRealm doesn't use a configured CredentialHandler. Is this a configuration error?
 combinedRealm.unexpectedMethod=An unexpected call was made to a method on the combined realm
 
 credentialHandler.invalidStoredCredential=The invalid stored credential string [{0}] was provided by the Realm to match with the user provided credentials

diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
@@ -75,6 +75,13 @@
         Remove redundant sole path/URI from error page message on SC_NOT_FOUND.
         (michaelo)
       </update>
+      <add>
+        Log a warning if a <code>CredentialHandler</code> instance is added to
+        an instance of the <code>CombinedRealm</code> (or a sub-class) as the
+        <code>CombinedRealm</code> doesn't use a configued
+        <code>CredentialHandler</code> and it is likely that a configuration
+        error has occurred. (markt)
+      </add>
     </changelog>
   </subsection>
   <subsection name="Coyote">