Merge pull request #833 from honza889/sac-invalidname

[ELY-1115] SAC: InvalidNameState for non-existing identities
wildfly-security · May 30, 2017 · 03e583d · 03e583d
2 parents 33b416d + 6abb18c
commit 03e583d
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/main/java/org/wildfly/security/auth/server/ServerAuthenticationContext.java b/src/main/java/org/wildfly/security/auth/server/ServerAuthenticationContext.java
@@ -1050,6 +1050,9 @@ State assignName(final SecurityIdentity capturedIdentity, final MechanismConfigu
         } else {
             realmIdentity = securityRealm.getRealmIdentity(finalPrincipal);
         }
+        if (! realmIdentity.exists()) {
+            return new InvalidNameState(capturedIdentity, mechanismConfiguration, mechanismRealmConfiguration, privateCredentials, publicCredentials);
+        }
         return new NameAssignedState(capturedIdentity, realmInfo, realmIdentity, preRealmPrincipal, mechanismConfiguration, mechanismRealmConfiguration, privateCredentials, publicCredentials);
     }
 
@@ -1705,6 +1708,11 @@ MechanismRealmConfiguration getMechanismRealmConfiguration() {
             return mechanismRealmConfiguration;
         }
 
+        @Override
+        RealmIdentity getRealmIdentity() {
+            return RealmIdentity.NON_EXISTENT;
+        }
+
         @Override
         void fail() {
             final AtomicReference<State> stateRef = getStateRef();