Restored session existance check before OIDC/UMA ticket related checks

This commit is contained in:
Mauro Mugnaini 2021-04-29 19:18:52 +02:00
parent d1ce7ef5c9
commit 760448c7db
1 changed files with 8 additions and 2 deletions

View File

@ -71,10 +71,16 @@ public class SmartGearsPortalValve extends ValveBase {
_log.debug("Getting current user");
User user = getCurrentUser(request);
// user cannot be null otherwise also the getCurrentUsername(request) returned null username in previous lines
_log.debug("Getting current session");
HttpSession session = request.getSession(false);
OIDCUmaUtil.checkUMATicketAndProvideInThreadLocal(request, (HttpServletResponse) resp, user,
session, scope);
if (session == null) {
_log.debug("Session is null, cannot continue");
return;
} else {
OIDCUmaUtil.checkUMATicketAndProvideInThreadLocal(request, (HttpServletResponse) resp, user,
session, scope);
}
//_log.trace("Security token set OK for " + username + " in scope " + scope);
}