jbossas/jboss-as — pull request #3246 by sguilhen (2012-10-13 02:20:41+00:00)
Title: Fix security cache to use incoming principal as key. Handle groups in WebJASPIAuthenticator

AS7-5693 Use incoming principal when populating subject info / flushing cache. This aligns with changes made in PicketBox (JBossCachedAuthenticationManager now uses the incoming principal as cache key instead of the caller principal created by the login module).
AS7-5735 Handle GroupPrincipalCallback in the WebJASPIAuthenticator. Current code ignores any GroupPrincipalCallbacks and can also result in NPEs if the optional PasswordValidationCallback is null.