Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-10290

OAuth2PostAuthnPlugin fails to retrieve "logoutBehaviour" and throws NPE

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 13.5.0
    • Fix Version/s: 13.5.1, 14.0.0
    • Component/s: authentication
    • Labels:
    • Support Ticket IDs:

      Description

      1. setup OAuth2 auth module
      2. set PAP to org.forgerock.openam.authentication.modules.oauth2.OAuth2PostAuthnPlugin
      3. OAuth2PostAuthnPlugin fails to retrieve logoutBehavior from session and throws NPE

      This is because auth module is using setUserSessionProperty() which sets property value in InternalSession instead of Session object. OAuth2PostAuthnPlugin is using SSOToken which is linked to Session object so logoutBehaviour doesn't exist.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                sachiko Sachiko Wallace
                Reporter:
                sachiko Sachiko Wallace
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: