瀏覽代碼

Add Null Guard for Authorization Result

Josh Cummings 4 月之前
父節點
當前提交
7d6bdfedc8

+ 1 - 1
web/src/main/java/org/springframework/security/web/webauthn/registration/PublicKeyCredentialCreationOptionsFilter.java

@@ -105,7 +105,7 @@ public class PublicKeyCredentialCreationOptionsFilter extends OncePerRequestFilt
 		Supplier<SecurityContext> context = this.securityContextHolderStrategy.getDeferredContext();
 		Supplier<Authentication> authentication = () -> context.get().getAuthentication();
 		AuthorizationResult result = this.authorization.authorize(authentication, request);
-		if (!result.isGranted()) {
+		if (result == null || !result.isGranted()) {
 			response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
 			return;
 		}