[Fix] Handle null authorization

This commit is contained in:
Robert von Burg 2020-10-02 11:20:38 +02:00
parent fc5000d00f
commit 4f52c1852f
1 changed files with 1 additions and 1 deletions

View File

@ -155,7 +155,7 @@ public class AuthenticationRequestFilter implements ContainerRequestFilter {
protected Certificate validateSession(ContainerRequestContext requestContext, String remoteIp) {
String authorization = requestContext.getHeaderString(HttpHeaders.AUTHORIZATION);
authorization = authorization.trim();
authorization = authorization == null ? "" : authorization.trim();
if (isEmpty(authorization) || (authorization.startsWith("Basic ") && !getRestful().isBasicAuthEnabled())) {
return validateCookie(requestContext, remoteIp);