使用shiro框架进行用户登录认证报错（HTTP Status 500 - Authentication failed for token submission ）解决

最新推荐文章于 2025-03-21 14:30:03 发布

原创最新推荐文章于 2025-03-21 14:30:03 发布 · 1.3w 阅读

1 ·

CC 4.0 BY-SA版权

个人经验专栏收录该内容

10 篇文章

订阅专栏

本文分析了Apache Shiro框架中出现的登录失败问题，具体表现为因UsernamePasswordToken密码为空导致的NullPointerException异常。文章深入探讨了异常产生的原因及可能的解决方案。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

报错：

root cause

java.lang.NullPointerException
	org.apache.shiro.authc.credential.SimpleCredentialsMatcher.equals(SimpleCredentialsMatcher.java:95

HTTP Status 500 - Authentication failed for token submission [org.apache.shiro.authc.UsernamePasswordToken - rose, rememberMe=false]. Possible unexpected error? (Typical or expected login exceptions should extend from AuthenticationException).

type Exception report

message Authentication failed for token submission [org.apache.shiro.authc.UsernamePasswordToken - rose, rememberMe=false]. Possible unexpected error? (Typical or expected login exceptions should extend from AuthenticationException).

description The server encountered an internal error that prevented it from fulfilling this request.

exception

org.apache.shiro.authc.AuthenticationException: Authentication failed for token submission [org.apache.shiro.authc.UsernamePasswordToken - rose, rememberMe=false].  Possible unexpected error? (Typical or expected login exceptions should extend from AuthenticationException).
	org.apache.shiro.authc.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:214)
	org.apache.shiro.mgt.AuthenticatingSecurityManager.authenticate(AuthenticatingSecurityManager.java:106)
	org.apache.shiro.mgt.DefaultSecurityManager.login(DefaultSecurityManager.java:270)
	org.apache.shiro.subject.support.DelegatingSubject.login(DelegatingSubject.java:256)

原因：传递到realm中的usernamePasswordToken 的password值为null;