add null check for authentication status

seam · Mar 22, 2011 · 35bafc3 · 35bafc3
1 parent decbcaf
commit 35bafc3
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/impl/src/main/java/org/jboss/seam/security/IdentityImpl.java b/impl/src/main/java/org/jboss/seam/security/IdentityImpl.java
@@ -309,6 +309,11 @@ protected boolean authenticate() throws AuthenticationException
 
          activeAuthenticator.authenticate();
 
+         if (activeAuthenticator.getStatus() == null)
+         {
+            throw new AuthenticationException("Authenticator must return a valid authentication status");
+         }
+
          switch (activeAuthenticator.getStatus())
          {
             case SUCCESS:
@@ -317,8 +322,8 @@ protected boolean authenticate() throws AuthenticationException
             case FAILURE:
                authenticating = false;
                return false;
-         }                 
-         
+         }
+
          return false;
       }
       catch (Exception ex)