Frachtwerk / essencium-backend

Essencium Backend is a software library built on top of Spring Boot that allows developers to quickly get started on new software projects. Essencium provides, for example, a fully implemented role-rights concept as well as various field-tested solutions for access management and authentication.
GNU Lesser General Public License v3.0
15 stars 3 forks source link

NPE in OAuth2SuccessHandler/AbstractUserService if OAuth-mapped Role is not found #490

Closed pwannenmacher closed 3 months ago

pwannenmacher commented 3 months ago

Describe the bug In AbstractUserService.patchPreProcessing a NullPointerException is thrown if roles contains a Collection with null values. This behavior occurs when external (OAuth) roles are mapped to internal roles via environment variables, but these internal roles do not exist.