[KNOX-2070] SSOCookieFederationFilter NPE

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Component/s: KnoxSSO
• Assignee: Kevin Risden
• Reporter: Kevin Risden
• Created: 28/Oct/19 17:47
• Updated: 29/Oct/19 16:34
• Resolved: 29/Oct/19 16:34

Description

SSOCookieFederationFilter has a NPE when the error message is null. This can happen a few different ways if the token is invalid. It prevents the response from being sent correctly.

...
Caused by: java.lang.NullPointerException
	at org.apache.knox.gateway.provider.federation.jwt.filter.SSOCookieFederationFilter.handleValidationError(SSOCookieFederationFilter.java:140)
	at org.apache.knox.gateway.provider.federation.jwt.filter.AbstractJWTFilter.validateToken(AbstractJWTFilter.java:299)
	at org.apache.knox.gateway.provider.federation.jwt.filter.SSOCookieFederationFilter.doFilter(SSOCookieFederationFilter.java:122)
	at org.apache.knox.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:349)
	at org.apache.knox.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:263)
	at com.thetransactioncompany.cors.CORSFilter.doFilter(CORSFilter.java:209)
	at com.thetransactioncompany.cors.CORSFilter.doFilter(CORSFilter.java:244)
	at org.apache.knox.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:349)
	at org.apache.knox.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:263)
	at org.apache.knox.gateway.filter.XForwardedHeaderFilter.doFilter(XForwardedHeaderFilter.java:50)
	at org.apache.knox.gateway.filter.AbstractGatewayFilter.doFilter(AbstractGatewayFilter.java:58)
	... 52 more

Issue Links

• links to: GitHub Pull Request #170