fix(jans-auth-server): fix npe

npe when checking for client config option defaultpromptlogin Signed-off-by: Javier Rojas Blum <javier.rojas.blum@gmail.com>
JanssenProject · Mar 7, 2022 · e6debb2 · e6debb2
1 parent 452ce0f
commit e6debb2
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/...r/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java b/...r/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java
@@ -99,7 +99,7 @@
  * Implementation for request authorization through REST web services.
  *
  * @author Javier Rojas Blum
- * @version March 2, 2022
+ * @version March 7, 2022
  */
 @Path("/")
 public class AuthorizeRestWebServiceImpl implements AuthorizeRestWebService {
@@ -601,8 +601,9 @@ private Response requestAuthorization(
                 }
             }
 
-            if (identity.getSessionId().getState() == SessionIdState.AUTHENTICATED
+            if (identity != null && identity.getSessionId() != null && identity.getSessionId().getState() == SessionIdState.AUTHENTICATED
                     && client != null && Boolean.TRUE.equals(client.getAttributes().getDefaultPromptLogin())
+                    && identity.getSessionId().getAuthenticationTime() != null
                     && new Date().getTime() - identity.getSessionId().getAuthenticationTime().getTime() > 200) {
                 prompts.add(Prompt.LOGIN);
             }