Thanks Byron, Yes, the error is being generated by the checkpw method. Since the method is working as written, I don't think that moving the checkpw call to a set statement will alleviate the issue. When it decides to fail, it fails using the exact same credentials call from the client side, so I know that it is not an issue of incorrect values being passed in. Also, even with the more granular error checking, if the checkpw method decided to start failing, I would ultimately receive the ambiguous NullPointerException error. I may add the additional tests once the app goes live, since I won't be dealing with controlled data, but I don't think that it will benefit me with this current issue.
I am trying the application scoped suggestion as offered by Russ, since I know that I can refresh that variable even if the webservice is cached somewhere else. So far it has not failed again, so I am hoping that it solved the issue. Thanks again for you input Byron. On Thu, Dec 18, 2014 at 3:21 PM, Byron Mann <[email protected]> wrote: > > > Based on your description, I think this is the line causing an error. > > bcrypt.checkpw(lcase(password),Member.getMemberPassword()) > > I might just add some more granular logging before the statement that would > maybe nail down what is amiss. > > try { writeoutput(lcase(password)); } catch (any e) { write error 1 } > try { writeoutput(Member.getMemberPassword()); } catch (any e) { write > error 2 } > try { writeoutput(bcrypt.checkpw('test','test')); } catch (any e) { write > error 3 } > try { writeoutput(bcrypt.checkpw(lcase(password),Member. > getMemberPassword())); } catch (any e) { write error 4 } > bcrypt.checkpw(lcase(password),Member.getMemberPassword()) > > Could maybe also pull out the checkpw function from inside the if an set to > a variable. > > var chkResult = bcrypt.checkpw(lcase(password),Member.getMemberPassword()) > if(isDefined("chkResult") and !isNull(chkResult) and isBoolean(chkResult) > and chkResult){..... > > if statement might be a bit overkill, but may handle the error more > gracefully. > > -- [image: profile picture] *Dean Lawrence* *President* Internet Data Technology *Phone:* 888-438-4381 x701 *Web:* www.idatatech.com *Email:* [email protected] Programming | Database | Consulting | Training ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359860 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

