Validate system authenticators names at registering.

wso2 · Feb 13, 2025 · 90ff1ae · 90ff1ae
1 parent d5366d7
commit 90ff1ae
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/...bon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java b/...bon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java
@@ -479,6 +479,11 @@ protected void unsetRealmService(RealmService realmService) {
     )
     protected void setAuthenticator(ApplicationAuthenticator authenticator) {
 
+        /* Verify that the registering system-defined authenticator name starts with the `custom-` prefix,
+         which is reserved for user-defined authenticators.*/
+        if (authenticator.getName().startsWith("custom-")) {
+            return;
+        }
         ApplicationAuthenticatorManager.getInstance().addSystemDefinedAuthenticator(authenticator);
 
         Property[] configProperties = null;