in src/main/java/org/apache/sling/jcr/filetransfer/sftp/internal/JcrPasswordAuthenticator.java [49:64]
public boolean authenticate(final String username, final String password, final ServerSession serverSession) throws PasswordChangeRequiredException, AsyncAuthException {
logger.info("authenticating {} with password", username);
Session session = null;
try {
session = repository.login(new SimpleCredentials(username, password.toCharArray()));
logger.info("authenticating user {} ({}) succeeded", username, session.getUserID());
return true;
} catch (Exception e) {
logger.error("authenticating user {} failed: {}", username, e.getMessage());
} finally {
if (session != null) {
session.logout();
}
}
return false;
}