Add length checks to LDAPCredentialsValidator (#18959) (#18997) (#438)

mukul1987 · jtuglu1 · cecemei · web-flow · commit 431b3dcc4586 · 2026-03-06T14:08:31.000+05:30
(cherry picked from commit a57afa1) Co-authored-by: jtuglu1 <jtuglu@netflix.com> Co-authored-by: Cece Mei <yingqian.mei@gmail.com>
diff --git a/extensions-core/druid-basic-security/src/main/java/org/apache/druid/security/basic/authentication/validator/LDAPCredentialsValidator.java b/extensions-core/druid-basic-security/src/main/java/org/apache/druid/security/basic/authentication/validator/LDAPCredentialsValidator.java
@@ -153,6 +153,9 @@ public AuthenticationResult validateCredentials(
       char[] password
   )
   {
+    if (username.isEmpty() || password.length == 0) {
+      return null;
+    }
     final SearchResult userResult;
     final LdapName userDn;
     final Map<String, Object> contextMap = new HashMap<>();

Original file line number	Diff line number	Diff line change
`@@ -153,6 +153,9 @@ public AuthenticationResult validateCredentials(`
`153`	`153`	`char[] password`
`154`	`154`	`)`
`155`	`155`	`{`
	`156`	`+ if (username.isEmpty() \|\| password.length == 0) {`
	`157`	`+ return null;`
	`158`	`+ }`
`156`	`159`	`final SearchResult userResult;`
`157`	`160`	`final LdapName userDn;`
`158`	`161`	`final Map<String, Object> contextMap = new HashMap<>();`