diff --git a/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java b/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java index ce24d25cda..1700927726 100644 --- a/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java +++ b/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java @@ -195,7 +195,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer { List fetchAxAttributes(Message authSuccess, List attributesToFetch) throws OpenIDConsumerException { - if (!authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) { + if (attributesToFetch == null || !authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) { return Collections.emptyList(); }