Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Throw exception that was created but not thrown

Browse Source 
Fixes gh-5462
This commit is contained in:
Thomas Vitale
2019-03-10 19:54:27 +01:00
committed by Josh Cummings
parent b252371de7
commit d88c2c19f0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/src/main/java/org/springframework/security/web/authentication/www/DigestAuthenticationFilter.java
View File

@@ -431,7 +431,7 @@ public class DigestAuthenticationFilter extends GenericFilterBean
.md5Hex(this.nonceExpiryTime + ":" + entryPointKey); .md5Hex(this.nonceExpiryTime + ":" + entryPointKey);
if (!expectedNonceSignature.equals(nonceTokens[1])) { if (!expectedNonceSignature.equals(nonceTokens[1])) {
new BadCredentialsException(DigestAuthenticationFilter.this.messages throw new BadCredentialsException(DigestAuthenticationFilter.this.messages
.getMessage("DigestAuthenticationFilter.nonceCompromised", .getMessage("DigestAuthenticationFilter.nonceCompromised",
new Object[] { nonceAsPlainText }, new Object[] { nonceAsPlainText },
"Nonce token compromised {0}")); "Nonce token compromised {0}"));