From 90ff1ae6e003afa54b858cb0875928139dedc61d Mon Sep 17 00:00:00 2001 From: Thisara-Welmilla Date: Thu, 13 Feb 2025 16:32:59 +0530 Subject: [PATCH] Validate system authenticators names at registering. --- .../framework/internal/FrameworkServiceComponent.java | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java b/components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java index 8184476cda5b..8f1efb918f7c 100644 --- a/components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java +++ b/components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/internal/FrameworkServiceComponent.java @@ -479,6 +479,11 @@ protected void unsetRealmService(RealmService realmService) { ) protected void setAuthenticator(ApplicationAuthenticator authenticator) { + /* Verify that the registering system-defined authenticator name starts with the `custom-` prefix, + which is reserved for user-defined authenticators.*/ + if (authenticator.getName().startsWith("custom-")) { + return; + } ApplicationAuthenticatorManager.getInstance().addSystemDefinedAuthenticator(authenticator); Property[] configProperties = null;