[java-idp-plugin-duo] 06/16: Remove possible NPE in duo integration get

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=06fc907f8bf6efb8781e0382abf2ca167b862378

commit 06fc907f8bf6efb8781e0382abf2ca167b862378
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Sep 18 19:29:05 2020 +0100

    Remove possible NPE in duo integration get
---
 .../shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
index 685b605..11eb9e7 100644
--- a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
+++ b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
@@ -117,7 +117,7 @@ public class ValidateTokenSignature extends AbstractDuoAuthenticationAction {
         } else if (token instanceof SignedJWT) {
             try {
                 if (SUPPORTED_SIGNATURE_FAMILY.contains(((SignedJWT)token).getHeader().getAlgorithm())) {
-                    final JWSVerifier verifier = new MACVerifier(duoContext.getIntegration().getSecretKey());
+                    final JWSVerifier verifier = new MACVerifier(integration.getSecretKey());
                     if (!((SignedJWT)token).verify(verifier)) {
                         log.error("{} Token signature is invalid for subject '{}' and client '{}'",getLogPrefix(),
                                 claimSet.getSubject(),integration.getClientId());

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.