WLS 12 JACC: FORM Login Doesn't Work If JACC Policy Provider Is Enabled (Doc ID 1567630.1)

Last updated on SEPTEMBER 22, 2023

Applies to:

Symptoms

If the WLS JSR-115 Simple JACC Policy Provider is enabled, FORM login via httpServletRequest.authenticate(httpServletResponse) always returns true, although no user principal is established in the servlet request, that is calling httpServletRequest.getUserPrincipal() returns null.

  However, the method documentation of httpServletRequest.authenticate(response) that:

  Returns:
  true when non-null values were or have been established as the values
  returned by getUserPrincipal, getRemoteUser, and getAuthType. Return false
  if authentication is incomplete and the underlying login mechanism has
  committed, in the response, the message (e.g., challenge) and HTTP status
  code to be returned to the user.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.