diff --git a/src/main/java/eu/dnetlib/uoaauthorizationlibrary/utils/AuthorizationUtils.java b/src/main/java/eu/dnetlib/uoaauthorizationlibrary/utils/AuthorizationUtils.java
index 8add38c..6e401dd 100644
--- a/src/main/java/eu/dnetlib/uoaauthorizationlibrary/utils/AuthorizationUtils.java
+++ b/src/main/java/eu/dnetlib/uoaauthorizationlibrary/utils/AuthorizationUtils.java
@@ -54,11 +54,14 @@ public class AuthorizationUtils {
 
     private boolean hasCookie(HttpServletRequest request) {
         Cookie[] cookies = request.getCookies();
-        if(securityConfig.isDeprecated()) {
-            return Arrays.stream(cookies).anyMatch(cookie -> cookie.getName().equalsIgnoreCase(TOKEN));
-        } else {
-            return Arrays.stream(cookies).anyMatch(cookie -> cookie.getName().equalsIgnoreCase(SESSION));
+        if(cookies != null) {
+            if (securityConfig.isDeprecated()) {
+                return Arrays.stream(cookies).anyMatch(cookie -> cookie.getName().equalsIgnoreCase(TOKEN));
+            } else {
+                return Arrays.stream(cookies).anyMatch(cookie -> cookie.getName().equalsIgnoreCase(SESSION));
+            }
         }
+        return false;
     }
 
     private HttpEntity<HttpHeaders> createHeaders(HttpServletRequest request) {