Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-05-31 09:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Null Guard for Authorization Result

Browse Source
This commit is contained in:
Josh Cummings 2025-04-22 15:40:11 -06:00
parent a683a3a730
commit 7d6bdfedc8
No known key found for this signature in database
GPG Key ID: 869B37A20E876129
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/src/main/java/org/springframework/security/web/webauthn/registration/PublicKeyCredentialCreationOptionsFilter.java
View File

@ -105,7 +105,7 @@ public class PublicKeyCredentialCreationOptionsFilter extends OncePerRequestFilt
Supplier<SecurityContext> context = this.securityContextHolderStrategy.getDeferredContext();
Supplier<Authentication> authentication = () -> context.get().getAuthentication();
AuthorizationResult result = this.authorization.authorize(authentication, request);
if (!result.isGranted()) {
if (result == null || !result.isGranted()) {
response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
return;
}