From 5af9d38a7c0bff8b8f49301580ea69084b4ae9a8 Mon Sep 17 00:00:00 2001 From: David Bateman Date: Wed, 8 Apr 2026 17:03:33 +0200 Subject: [PATCH] Reinclude accidentally removed check if implicit token is null --- .../auth/openid/AuthenticationProviderService.java | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-openid/src/main/java/org/apache/guacamole/auth/openid/AuthenticationProviderService.java b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-openid/src/main/java/org/apache/guacamole/auth/openid/AuthenticationProviderService.java index 111a35291..1513b9b18 100644 --- a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-openid/src/main/java/org/apache/guacamole/auth/openid/AuthenticationProviderService.java +++ b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-openid/src/main/java/org/apache/guacamole/auth/openid/AuthenticationProviderService.java @@ -152,11 +152,13 @@ public class AuthenticationProviderService implements SSOAuthenticationProviderS if (confService.getFlowType().equals("implicit")) { String token = credentials.getParameter(IMPLICIT_TOKEN_PARAMETER_NAME); - JwtClaims claims = tokenService.validateToken(token); - if (claims != null) { - username = tokenService.processUsername(claims); - groups = tokenService.processGroups(claims); - tokens = tokenService.processAttributes(claims); + if (token != null) { + JwtClaims claims = tokenService.validateToken(token); + if (claims != null) { + username = tokenService.processUsername(claims); + groups = tokenService.processGroups(claims); + tokens = tokenService.processAttributes(claims); + } } } else { String verifier = null;