Use char array for password

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / CmsLogin.java

diff --git a/org.argeo.cms/src/org/argeo/cms/CmsLogin.java b/org.argeo.cms/src/org/argeo/cms/CmsLogin.java
index ac63351e3d65a9844d34e2a9664921edd879c4a5..f470d9ba63a4fdbd43d5c71a879b52bd2e170512 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/CmsLogin.java
+++ b/org.argeo.cms/src/org/argeo/cms/CmsLogin.java
@@ -40,7 +40,7 @@ public class CmsLogin {
 
        protected void logInWithPassword(String username, char[] password) {
                UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(
-                               username, new String(password));
+                               username, password);
                Authentication authentication = authenticationManager
                                .authenticate(token);
                SecurityContextHolder.getContext().setAuthentication(authentication);