[java-idp-plugin-duo] branch dev/nimbus updated: Remove possible NPE in duo integration get

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch dev/nimbus
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=7ac9497dbd01e66495836ae9516d7290da7da8fb

The following commit(s) were added to refs/heads/dev/nimbus by this push:
       new  7ac9497   Remove possible NPE in duo integration get
7ac9497 is described below

commit 7ac9497dbd01e66495836ae9516d7290da7da8fb
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Sep 18 19:29:05 2020 +0100

    Remove possible NPE in duo integration get
---
 .../shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
index 685b605..11eb9e7 100644
--- a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
+++ b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/ValidateTokenSignature.java
@@ -117,7 +117,7 @@ public class ValidateTokenSignature extends AbstractDuoAuthenticationAction {
         } else if (token instanceof SignedJWT) {
             try {
                 if (SUPPORTED_SIGNATURE_FAMILY.contains(((SignedJWT)token).getHeader().getAlgorithm())) {
-                    final JWSVerifier verifier = new MACVerifier(duoContext.getIntegration().getSecretKey());
+                    final JWSVerifier verifier = new MACVerifier(integration.getSecretKey());
                     if (!((SignedJWT)token).verify(verifier)) {
                         log.error("{} Token signature is invalid for subject '{}' and client '{}'",getLogPrefix(),
                                 claimSet.getSubject(),integration.getClientId());

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.