pzampino opened a new pull request #427:
URL: https://github.com/apache/knox/pull/427


   ## What changes were proposed in this pull request?
   
   Added some checks for missing Knox token UUID claim around the signature 
verification caching (which was added as part of KNOX-2544) to avoid 
NullPointerException when JWTs which were not issued by Knox (but which Knox 
can verify) are received.
   
   ## How was this patch tested?
   
   Added 
org.apache.knox.gateway.provider.federation.AbstractJWTFilterTest#testJWTWithoutKnoxUUIDClaim()
 to reproduce the NPE condition and then to verify the fix. Ran all other 
existing tests as part of the build.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to