protected final boolean authenticateUsernamePasswordInternal(final UsernamePasswordCredentials credentials) throws AuthenticationException {
final String transformedUsername = getPrincipalNameTransformer().transform(credentials.getUsername());
if (this.users.contains(transformedUsername)) {
throw new BlockedCredentialsAuthenticationException();
}
return true;
}