Commit 2b957369 authored by Brian Major's avatar Brian Major
Browse files

t72306 - check for empty password string

parent a6bc9002

projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/LoginServlet.java

+2 −2
Original line number Diff line number Diff line
@@ -153,9 +153,9 @@ public class LoginServlet<T extends Principal> extends HttpServlet 
            String userID = request.getParameter("username");

            String password = request.getParameter("password");



            if (userID == null)

            if (userID == null || userID.length() == 0)

                throw new IllegalArgumentException("Missing username");

            if (password == null)

            if (password == null || password.length() == 0)

                throw new IllegalArgumentException("Missing password");



            userID = userID.trim();