Bug 65479

Summary:	PasswordValidationCallback does not return validation result in getResult
Product:	Tomcat 10	Reporter:	Robert Rodewald <robert.rodewald>
Component:	Authentication	Assignee:	Tomcat Developers Mailing List <dev>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	P2
Version:	unspecified
Target Milestone:	------
Hardware:	PC
OS:	All

Description Robert Rodewald 2021-08-02 09:26:22 UTC

The specification requires that the validation result must be returned in the getResult Method of the PasswordValidationCallback. This is currently not the case.

Comment 1 Robert Rodewald 2021-08-02 09:33:56 UTC

I just created a pull request with a bugfix for this.

It's a simple one-liner.

Shall I create pull requests for the other branches as well or is there a better way?

Comment 2 Mark Thomas 2021-08-02 10:54:37 UTC

No need for additional PRs. The committers will backport as necessary.

Comment 3 Mark Thomas 2021-08-17 11:55:54 UTC

Thanks for the report and the PR. And extra thanks for including a test case.

Fixed in:
- 10.1.x for 10.1.0-M5 onwards
- 10.0.x for 10.0.11 onwards
- 9.0.x for 9.0.53 onwards
- 8.5.x for 8.5.71 onwards