SEC-1820: Added null check for attributesToFetch in OpenID4JavaConsumer.

This commit is contained in:
Luke Taylor 2011-09-20 21:46:21 +01:00
parent 4a000d040c
commit a573e7b395
1 changed files with 1 additions and 1 deletions

View File

@ -195,7 +195,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer {
List<OpenIDAttribute> fetchAxAttributes(Message authSuccess, List<OpenIDAttribute> attributesToFetch)
throws OpenIDConsumerException {
if (!authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) {
if (attributesToFetch == null || !authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) {
return Collections.emptyList();
}