1
0
mirror of synced 2026-08-04 17:27:13 +00:00

Fixed NPE see SEC-143

This commit is contained in:
Ray Krueger
2006-01-16 23:56:04 +00:00
parent 38629f159a
commit b20c0a674a
@@ -421,8 +421,12 @@ public class JaasAuthenticationProvider implements AuthenticationProvider,
*/
protected void handleLogout(HttpSessionDestroyedEvent event) {
SecurityContext context = (SecurityContext) event.getSession().getAttribute(HttpSessionContextIntegrationFilter.ACEGI_SECURITY_CONTEXT_KEY);
if (context == null) {
log.debug("The destroyed session has no SecurityContext");
return;
}
Authentication auth = context.getAuthentication();
if (auth instanceof JaasAuthenticationToken) {
if ((auth != null) && (auth instanceof JaasAuthenticationToken)) {
JaasAuthenticationToken token = (JaasAuthenticationToken) auth;
try {
LoginContext loginContext = token.getLoginContext();