Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-05-22 21:33:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't Attempt to Generate Token Without Valid Token Request

Browse Source 
Closes gh-18088

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
This commit is contained in:
Josh Cummings
2025-10-20 11:58:57 -06:00
parent e0a71eb00e
commit 1c112005fa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/authentication/ott/GenerateOneTimeTokenFilter.java
+1 -1
View File
@@ -68,11 +68,11 @@ public final class GenerateOneTimeTokenFilter extends OncePerRequestFilter {
return; return;
} }
GenerateOneTimeTokenRequest generateRequest = this.requestResolver.resolve(request); GenerateOneTimeTokenRequest generateRequest = this.requestResolver.resolve(request);
OneTimeToken ott = this.tokenService.generate(generateRequest);
if (generateRequest == null) { if (generateRequest == null) {
filterChain.doFilter(request, response); filterChain.doFilter(request, response);
return; return;
} }
OneTimeToken ott = this.tokenService.generate(generateRequest);
this.tokenGenerationSuccessHandler.handle(request, response, ott); this.tokenGenerationSuccessHandler.handle(request, response, ott);
} }