Description michael1224.fang 2011-04-20 23:17:57 EDT

Build Identifier: 

HttpServletRequest.login() always throws ServletException after invoking HttpServletRequest.isUserInRole().

The issue could be reproduced by the following code snippet: 

public class LoginServlet extends javax.servlet.http.HttpServlet {

    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {

        if (!request.isUserInRole("user")) {
            try {
                request.login("user", "password");
            } catch(ServletException se) {
                // ServletException is always thrown here
            }
        }
    }
}


Reproducible: Always