SEC-404: NPE when logging out if user not already logged in.

2026-07-20 01:55:08 +00:00 · 2006-12-28 21:23:35 +00:00
parent 17cc70a3cd
commit 3f62a5c868
1 changed files with 1 additions and 1 deletions
@@ -292,7 +292,7 @@ public class TokenBasedRememberMeServices implements RememberMeServices, Initial
    }

    public void logout(HttpServletRequest request, HttpServletResponse response, Authentication authentication) {
-        cancelCookie(request, response, "Logout of user " + authentication.getName());
+        cancelCookie(request, response, "Logout of user " + authentication == null ? "Unknown" : authentication.getName()); 
    }

    protected Cookie makeCancelCookie(HttpServletRequest request) {