Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-23 04:22:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed NPE see SEC-143

Browse Source
This commit is contained in:
Ray Krueger 2006-01-16 23:56:04 +00:00
parent 38629f159a
commit b20c0a674a
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
core/src/main/java/org/acegisecurity/providers/jaas/JaasAuthenticationProvider.java
View File

@ -421,8 +421,12 @@ public class JaasAuthenticationProvider implements AuthenticationProvider,
*/ */
protected void handleLogout(HttpSessionDestroyedEvent event) { protected void handleLogout(HttpSessionDestroyedEvent event) {
SecurityContext context = (SecurityContext) event.getSession().getAttribute(HttpSessionContextIntegrationFilter.ACEGI_SECURITY_CONTEXT_KEY); SecurityContext context = (SecurityContext) event.getSession().getAttribute(HttpSessionContextIntegrationFilter.ACEGI_SECURITY_CONTEXT_KEY);
if (context == null) {
log.debug("The destroyed session has no SecurityContext");
return;
}
Authentication auth = context.getAuthentication(); Authentication auth = context.getAuthentication();
if (auth instanceof JaasAuthenticationToken) { if ((auth != null) && (auth instanceof JaasAuthenticationToken)) {
JaasAuthenticationToken token = (JaasAuthenticationToken) auth; JaasAuthenticationToken token = (JaasAuthenticationToken) auth;
try { try {
LoginContext loginContext = token.getLoginContext(); LoginContext loginContext = token.getLoginContext();