X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=org.argeo.security.core%2Fsrc%2Forg%2Fargeo%2Fsecurity%2Fjcr%2Fjackrabbit%2FJackrabbitUserAdminService.java;h=711c9d598e031f50069bd624bface214fac2638c;hb=f26488eb522b692e8806a4066a8f8870d8399206;hp=fde3d850fcfb34b94ffcd3eabdbbd1af96d7251d;hpb=559786a622e24c7d213960a7873e105db82a03ab;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.security.core/src/org/argeo/security/jcr/jackrabbit/JackrabbitUserAdminService.java b/org.argeo.security.core/src/org/argeo/security/jcr/jackrabbit/JackrabbitUserAdminService.java
index fde3d850f..711c9d598 100644
--- a/org.argeo.security.core/src/org/argeo/security/jcr/jackrabbit/JackrabbitUserAdminService.java
+++ b/org.argeo.security.core/src/org/argeo/security/jcr/jackrabbit/JackrabbitUserAdminService.java
@@ -302,6 +302,8 @@ public class JackrabbitUserAdminService implements UserAdminService,
 			Authentication authentication) throws AuthenticationException {
 		UsernamePasswordAuthenticationToken siteAuth = (UsernamePasswordAuthenticationToken) authentication;
 		String username = siteAuth.getName();
+		if (!(siteAuth.getCredentials() instanceof char[]))
+			throw new ArgeoException("Only char array passwords are supported");
 		char[] password = (char[]) siteAuth.getCredentials();
 		try {
 			SimpleCredentials sp = new SimpleCredentials(siteAuth.getName(),