If the supplied username or password in a request are null there is a nasty NullPointerException in the logs and the caller service receives an "Internal server error" message.
Add a null check for username and password, if either is null the authorization process should check the security token instead.
If the supplied username or password in a request are null there is a nasty NullPointerException in the logs and the caller service receives an "Internal server error" message. Add a null check for username and password, if either is null the authorization process should check the security token instead.