id,summary,reporter,owner,description,type,status,priority,milestone,component,version,resolution,keywords,cc
478,NullPointerException in FormAuthenticationMethod challenge method when triggered from template,jgou,bruno,"The !FormAuthenticationMethod challenge method throws a !NullPointerException when triggered from a template. This is the case when a template variable pointing to a protected area is used on an unprotected page.
The exception is caused by request.getHostRef().toString() , with hostRef being null.

Suggested approach when hostref is null:
* fix NPE
* log error/warning
* set status code to 401 - Unauthorized instead of doing redirect to login page",task,new,minor,0.4,modules/kauri-security,,,,