fix(jans-auth-server): wrong Client Authn Method at token endpoint th…

…rows npe #3503 (#3598)
JanssenProject · Jan 11, 2023 · e3bd1e8 · e3bd1e8
1 parent df07a71
commit e3bd1e8
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/jans-auth-server/server/src/main/java/io/jans/as/server/service/AuthorizeService.java b/jans-auth-server/server/src/main/java/io/jans/as/server/service/AuthorizeService.java
@@ -151,13 +151,18 @@ public void permissionGranted(HttpServletRequest httpRequest, final SessionId se
         try {
             final User user = sessionIdService.getUser(session);
             if (user == null) {
-                log.debug("Permission denied. Failed to find session user: userDn = " + session.getUserDn() + ".");
+                log.debug("Permission denied. Failed to find session user: userDn = {}", session.getUserDn());
                 permissionDenied(session);
                 return;
             }
 
             String clientId = session.getSessionAttributes().get(AuthorizeRequestParam.CLIENT_ID);
             final Client client = clientService.getClient(clientId);
+            if (client == null) {
+                log.debug("Permission denied. Failed to find client by id: {}", clientId);
+                permissionDenied(session);
+                return;
+            }
 
             String scope = session.getSessionAttributes().get(AuthorizeRequestParam.SCOPE);
             String responseType = session.getSessionAttributes().get(AuthorizeRequestParam.RESPONSE_TYPE);