/**
- * The number of random bytes to include when generating a
- * session identifier.
- */
- protected static final int SESSION_ID_BYTES = 16;
-
- /**
* Authentication header
*/
protected static final String AUTH_HEADER_NAME = "WWW-Authenticate";
protected abstract String getAuthMethod();
+ /**
+ * Process the login request.
+ *
+ * @param request Associated request
+ * @param username The user
+ * @param password The password
+ * @return The authenticated Principal
+ * @throws ServletException
+ */
protected Principal doLogin(Request request, String username,
String password) throws ServletException {
Principal p = context.getRealm().authenticate(username, password);
<Bug code="REC"/>
</Match>
<Match>
+ <Class name="org.apache.catalina.authenticator.AuthenticatorBase"/>
+ <Field name="sessionIdGenerator"/>
+ <Bug code="IS"/>
+ </Match>
+ <Match>
<!-- JNI library can only be loaded once so statics are appropriate -->
<Class name="org.apache.catalina.core.AprLifecycleListener" />
<Bug code="ST" />