Identity Password is null

[bartj07]

Does anyone know why identity.password is null in any other component except authenticator?

[mkiel]

According to the source, identity.password is set to null after every authentication attempt. So it's actually only the time of access which counts and not the accessing component - but normally, only the authenticator method gets called in this time window.

[bartj07]

So I just need to override postAuthenticate.  Thanks for the reply.

[mkiel]

I guess you mean authenticate(). But if you do need the password at all times, it might be better to create your own session-scoped component and store the password there. Then you can easily switch to a different builtin implementation of Identity.

[jacob.orshalick]

Does anyone know why identity.password is null in any other component except authenticator?

This is for security reasons.  Sensitive data (like passwords) should be kept in memory for as short a period of time as possible.  If you intend to keep it in memory, ensure that you have applied appropriate encryption.