mariusz.pacek/keycloak
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[KEYCLOAK-3086] - NPE when accessing Account with invalid clientId set as ?referrer, and additional referrer_uri set

Browse Source
This commit is contained in:
Bruno Oliveira authored and Stian Thorgersen committed 2016-11-10 13:49:40 +01:00
1 parent 52a4509ada
commit 675faee593
2 files changed
+17 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java
+3 -2
View File
@@ -42,8 +42,9 @@ public class RedirectUtils {
}
public static String verifyRedirectUri(UriInfo uriInfo, String redirectUri, RealmModel realm, ClientModel client) {
Set<String> validRedirects = client.getRedirectUris();
return verifyRedirectUri(uriInfo, client.getRootUrl(), redirectUri, realm, validRedirects);
if (client != null)
return verifyRedirectUri(uriInfo, client.getRootUrl(), redirectUri, realm, client.getRedirectUris());
return null;
}
public static Set<String> resolveValidRedirects(UriInfo uriInfo, String rootUrl, Set<String> validRedirects) {