[CXF-6248] NPE at OAuthRequestFilter when no Authorization header found

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 3.0.3
• Fix Version/s: 3.0.4, 3.1
• Component/s: JAX-RS Security
• Estimated Complexity: Novice
• Assignee: Sergey Beryozkin
• Reporter: Eneko Fernández
• Created: 10/Feb/15 09:25
• Updated: 16/Feb/15 16:09
• Resolved: 10/Feb/15 09:51

Description

Hi,

When trying the filter with a message without Authorization header the NullPointerException comes up.

java.lang.NullPointerException: null
at org.apache.cxf.rs.security.oauth2.utils.AuthorizationUtils.getAuthorizationParts(AuthorizationUtils.java:76) ~[cxf-rt-rs-security-oauth2-3.0.3.jar:3.0.3]
at org.apache.cxf.rs.security.oauth2.utils.AuthorizationUtils.getAuthorizationParts(AuthorizationUtils.java:69) ~[cxf-rt-rs-security-oauth2-3.0.3.jar:3.0.3]
at org.apache.cxf.rs.security.oauth2.filters.OAuthRequestFilter.getAuthorizationParts(OAuthRequestFilter.java:227) ~[cxf-rt-rs-security-oauth2-3.0.3.jar:3.0.3]
at org.apache.cxf.rs.security.oauth2.filters.OAuthRequestFilter.validateRequest(OAuthRequestFilter.java:83) ~[cxf-rt-rs-security-oauth2-3.0.3.jar:3.0.3]

Issue Links

• duplicates: CXF-6153 OAuthRequestFilter throws NullPointerException when "Authorization" header is missing