Hi! I've recently found out that getUserPrincipal() returns null in a Listener [1]. I remember that this used to return the correct Principal in older versions (might be some time already). Also from reading the spec I assumed it should work.
Any infos on this? LieGrue, strub [1] http://svn.apache.org/repos/asf/openwebbeans/trunk/webbeans-tomcat7/src/main/java/org/apache/webbeans/web/tomcat/TomcatSecurityListener.java