Don't add scopes if none are provided

Signed-off-by: Travis Spencer <travis@curity.io>
2019-09-28 14:21:01 +02:00 · 2019-09-28 14:21:01 +02:00 · 201264d17b
parent ba728eee5d
commit 201264d17b
1 changed files with 2 additions and 1 deletions
--- a/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java
+++ b/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java
@ -131,7 +131,8 @@ public class OpenIdConfiguration implements Serializable

    public void addScopes(String... scopes)
    {
-        Collections.addAll(this.scopes, scopes);
+        if (scopes != null)
+            Collections.addAll(this.scopes, scopes);
    }

    public List<String> getScopes()