keycloak-memoizeit

KEYCLOAK-9036 Fix NPE

12/11/2018 9:20:14 AM

Hynek Mlnarik

Commit: cea9e87

Tree: 113df61

Parents: aa89ae9

Changes

services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java 4(+3 -1)

Details

services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java 4(+3 -1)

diff --git a/services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java b/services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java
index a6980a9..b190ff8 100755
--- a/services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java
+++ b/services/src/main/java/org/keycloak/broker/saml/SAMLEndpoint.java
@@ -418,7 +418,9 @@ public class SAMLEndpoint {
                     String issuerURL = getEntityId(session.getContext().getUri(), realm);
                     cvb.addAllowedAudience(URI.create(issuerURL));
                     // getDestination has been validated to match request URL already so it matches SAML endpoint
-                    cvb.addAllowedAudience(URI.create(responseType.getDestination()));
+                    if (responseType.getDestination() != null) {
+                        cvb.addAllowedAudience(URI.create(responseType.getDestination()));
+                    }
                 } catch (IllegalArgumentException ex) {
                     // warning has been already emitted in DeploymentBuilder
                 }