使用client_credentials获取token报空指针 #IDK3Q0

This commit is contained in:
shimingxy
2026-01-16 15:41:37 +08:00
parent c9810dd062
commit 7ac423698a

View File

@@ -94,7 +94,8 @@ public class DefaultTokenServices implements AuthorizationServerTokenServices, R
private void saveVisited(OAuth2Authentication authentication, OAuth2AccessToken accessToken) {
//存储oauth、oidc等的token,用户退出时清除
if(authentication.getUserAuthentication().getPrincipal() instanceof SignPrincipal principal) {
if(authentication.getUserAuthentication() != null
&& authentication.getUserAuthentication().getPrincipal() instanceof SignPrincipal principal) {
_logger.debug("{}({}) , session {} access for logout clear ",
principal.getUsername(),principal.getUserId(),principal.getSessionId());
String clientId = authentication.getOAuth2Request().getRequestParameters().get(OAuth2Constants.PARAMETER.CLIENT_ID);