Ajustes para tratamento correto na detecção de falha na autenticação do

JAAS com Servlet

Ajustes para tratamento correto na detecção de falha na autenticação do
JAAS com Servlet
Cleverson Sacramento
1 parent 62e45da7
Showing 1 changed file with 2 additions and 1 deletions Show diff stats
impl/extension/servlet/src/main/java/br/gov/frameworkdemoiselle/security/ServletAuthenticator.java
@@ -68,7 +68,8 @@ public class ServletAuthenticator implements Authenticator {
 			getRequest().login(getCredentials().getUsername(), getCredentials().getPassword());
  
 		} catch (ServletException cause) {
-			if (cause.getMessage().contains("invalid")) {
+			if (cause.getMessage().toLowerCase().contains("invalid")
+					|| cause.getMessage().toLowerCase().contains("incorrect")) {
 				throw new InvalidCredentialsException(getBundle().getString("invalid-credentials"));
 			} else {
 				throw new AuthenticationException(getBundle().getString("authentication-failed"), cause);
...	...	@@ -68,7 +68,8 @@ public class ServletAuthenticator implements Authenticator {
68	68	getRequest().login(getCredentials().getUsername(), getCredentials().getPassword());
69	69
70	70	} catch (ServletException cause) {
71		- if (cause.getMessage().contains("invalid")) {
	71	+ if (cause.getMessage().toLowerCase().contains("invalid")
	72	+ \|\| cause.getMessage().toLowerCase().contains("incorrect")) {
72	73	throw new InvalidCredentialsException(getBundle().getString("invalid-credentials"));
73	74	} else {
74	75	throw new AuthenticationException(getBundle().getString("authentication-failed"), cause);
...	...