Program: 9149
Project: 9149
Buggy source:
/** 
 * Initialises the JwtSessionModule for use by the Post Authentication Process.
 * @param requestParamsMap {@inheritDoc}
 * @param request {@inheritDoc}
 * @param response {@inheritDoc}
 * @param ssoToken {@inheritDoc}
 * @return {@inheritDoc}
 * @throws AuthenticationException {@inheritDoc}
 */
@Override protected Map<String,Object> initialize(Map requestParamsMap,HttpServletRequest request,HttpServletResponse response,SSOToken ssoToken) throws AuthenticationException {
  try {
    final String tokenIdleTime=ssoToken.getProperty(JwtSessionModule.TOKEN_IDLE_TIME_CLAIM_KEY);
    final String maxTokenLife=ssoToken.getProperty(JwtSessionModule.MAX_TOKEN_LIFE_KEY);
    final boolean enforceClientIP=Boolean.parseBoolean(ssoToken.getProperty(ENFORCE_CLIENT_IP_SETTING_KEY));
    final String realm=ssoToken.getProperty(SSO_TOKEN_ORGANIZATION_PROPERTY_KEY);
    boolean secureCookie=Boolean.parseBoolean(ssoToken.getProperty(SECURE_COOKIE_KEY));
    boolean httpOnlyCookie=Boolean.parseBoolean(ssoToken.getProperty(HTTP_ONLY_COOKIE_KEY));
    String cookieName=ssoToken.getProperty(COOKIE_NAME_KEY);
    Collection<String> cookieDomains=Arrays.asList(ssoToken.getProperty(COOKIE_DOMAINS_KEY).split("String_Node_Str"));
    return initialize(tokenIdleTime,maxTokenLife,enforceClientIP,realm,secureCookie,httpOnlyCookie,cookieName,cookieDomains);
  }
 catch (  SSOException e) {
    DEBUG.error("String_Node_Str",e);
    throw new AuthenticationException(e.getLocalizedMessage());
  }
catch (  SMSException e) {
    DEBUG.error("String_Node_Str",e);
    throw new AuthenticationException(e.getLocalizedMessage());
  }
}

Fixed version (ground truth):
/** 
 * Initialises the JwtSessionModule for use by the Post Authentication Process.
 * @param requestParamsMap {@inheritDoc}
 * @param request {@inheritDoc}
 * @param response {@inheritDoc}
 * @param ssoToken {@inheritDoc}
 * @return {@inheritDoc}
 * @throws AuthenticationException {@inheritDoc}
 */
@Override protected Map<String,Object> initialize(Map requestParamsMap,HttpServletRequest request,HttpServletResponse response,SSOToken ssoToken) throws AuthenticationException {
  try {
    final String tokenIdleTime=ssoToken.getProperty(JwtSessionModule.TOKEN_IDLE_TIME_CLAIM_KEY);
    final String maxTokenLife=ssoToken.getProperty(JwtSessionModule.MAX_TOKEN_LIFE_KEY);
    final boolean enforceClientIP=Boolean.parseBoolean(ssoToken.getProperty(ENFORCE_CLIENT_IP_SETTING_KEY));
    final String realm=ssoToken.getProperty(SSO_TOKEN_ORGANIZATION_PROPERTY_KEY);
    boolean secureCookie=Boolean.parseBoolean(ssoToken.getProperty(SECURE_COOKIE_KEY));
    boolean httpOnlyCookie=Boolean.parseBoolean(ssoToken.getProperty(HTTP_ONLY_COOKIE_KEY));
    String cookieName=ssoToken.getProperty(COOKIE_NAME_KEY);
    String cookieDomainsString=ssoToken.getProperty(COOKIE_DOMAINS_KEY);
    Collection<String> cookieDomains;
    if (cookieDomainsString.isEmpty()) {
      cookieDomains=Collections.singleton(null);
    }
 else {
      cookieDomains=Arrays.asList(cookieDomainsString.split("String_Node_Str"));
    }
    return initialize(tokenIdleTime,maxTokenLife,enforceClientIP,realm,secureCookie,httpOnlyCookie,cookieName,cookieDomains);
  }
 catch (  SSOException e) {
    DEBUG.error("String_Node_Str",e);
    throw new AuthenticationException(e.getLocalizedMessage());
  }
catch (  SMSException e) {
    DEBUG.error("String_Node_Str",e);
    throw new AuthenticationException(e.getLocalizedMessage());
  }
}