Hi,
There is an implementation for authentication failure in two different way
by authenticate API in IdentityStore.
If the username is invalid or empty, then API throws an
*AuthenticationFailure* exception and if the password is wrong, then the
API returns *FailedA**uthenticationContext*.
Don't we need to make consistent for both cases ? Any special reason to do
this ?
public AuthenticationContext authenticate(Claim claim, Callback[] credentials,
String domainName) throws
AuthenticationFailure, IdentityStoreException {
*Harsha Thirimanna*
*Associate Tech Lead | WSO2*
Email: [email protected]
Mob: +94715186770
Blog: http://harshathirimanna.blogspot.com/
Twitter: http://twitter.com/harshathirimann
Linked-In: linked-in:
http://www.linkedin.com/pub/harsha-thirimanna/10/ab8/122
<http://wso2.com/signature>
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
