Closed skoczo closed 1 month ago
Hello @skoczo, thanks for using WildFly.
This repository represents the WildFly Website available at www.wildfly.org, so it is not the correct place to report or discuss WildFly issues.
If you have found a potential bug, please report it at the WildFly issue tracker:
If you need any other kind of assistance, there are also other communication channels:
There, WildFly community members or WildFly team can assist you with your issues. This issue will be now closed, thanks!
I have a case where OidcSecurityContext is throwing null pointer on readObject method. Root cause of that is that idTokenString is null. It looks like issue in code. In org.wildfly.security.http.oidc.RequestAuthenticator#completeAuthentication method security context is created with idTokenString being null
Then when org.wildfly.security.http.oidc.OidcSecurityContext#readObject will be executed to fill object null pointer will be thrown as idTokenString is null. Shouldn't be there some check to not decode idTokenString if it is not set. Especially when we know that it might be null because, in some cases, context is build using hardcoded null values.
Configuration is done in following way