Enhanced equals() method.

core/src/main/java/org/acegisecurity/providers/AbstractAuthenticationToken.java

@@ -31,14 +31,23 @@ public abstract class AbstractAuthenticationToken implements Authentication {
         if (obj instanceof AbstractAuthenticationToken) {
             AbstractAuthenticationToken test = (AbstractAuthenticationToken) obj;
 
-            if (this.getAuthorities().length != test.getAuthorities().length) {
-                return false;
-            }
+            if (!((this.getAuthorities() == null)
+                && (test.getAuthorities() == null))) {
+                if ((this.getAuthorities() == null)
+                    || (test.getAuthorities() == null)) {
+                    return false;
+                }
 
-            for (int i = 0; i < this.getAuthorities().length; i++) {
-                if (!this.getAuthorities()[i].equals(test.getAuthorities()[i])) {
+                if (this.getAuthorities().length != test.getAuthorities().length) {
                     return false;
                 }
+
+                for (int i = 0; i < this.getAuthorities().length; i++) {
+                    if (!this.getAuthorities()[i].equals(
+                            test.getAuthorities()[i])) {
+                        return false;
+                    }
+                }
             }
 
             return (this.getPrincipal().equals(test.getPrincipal())