null-safe target link filter

8 years ago · 0a02e7f545
1 changed files with 3 additions and 1 deletions
--- a/openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
+++ b/openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
@ -708,7 +708,9 @@ public class OIDCAuthenticationFilter extends AbstractAuthenticationProcessingFi
 			if (!Strings.isNullOrEmpty(target)) {
 				session.removeAttribute(TARGET_SESSION_VARIABLE);

-				target = deepLinkFilter.filter(target);
+				if (deepLinkFilter != null) {
+					target = deepLinkFilter.filter(target);
+				}

 				response.sendRedirect(target);
 			} else {