Doesn't work using non-ASCII chars for username and/or password for BASIC authentication.

Reproducer: add this security domain to configuration and set there right path to usersProperties and rolesProperties (These files are created below) <security-domain name="ldap-domain" cache-type="default"> <authentication> <login-module code="UsersRoles" flag="optional"> <module-option name="usersProperties" value="/path/to/users.properties"/> <module-option name="rolesProperties" value="/path/to/roles.properties"/> </login-module> </authentication> </security-domain> create new file users.properties:with content: #userWithÄÖÜäöüUmlauts=Password1 userWith\u00c4\u00d6\u00dc\u00e4\u00f6\u00fcUmlauts=Password1 admin=Password1 userWithUmlautPass=userWith\u00c4\u00d6\u00dc\u00e4\u00f6\u00fcUmlauts create new file roles.properties:with content: userWith\u00c4\u00d6\u00dc\u00e4\u00f6\u00fcUmlauts=JBossAdmin userWithUmlautPass=JBossAdmin admin=JBossAdmin Deploy WAR deployment (app.war is attached) then you can try log in http://localhost:8080/app/protected/SimpleSecuredServlet