npe fix in AuthenticationChannelImpl

added missing csrfField on the PageEmailNonce.html
Evolveum · Aug 4, 2023 · 88d81f8 · 88d81f8
1 parent 4ff6ea3
commit 88d81f8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/...in-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/login/module/PageEmailNonce.html b/...in-gui/src/main/java/com/evolveum/midpoint/gui/impl/page/login/module/PageEmailNonce.html
@@ -12,6 +12,7 @@
 <body>
 <wicket:extend>
     <form class="form-horizontal" action="ignore" wicket:id="form">
+        <div wicket:id="csrfField"/>
 
         <a class="btn btn-primary flex-wrap gap-2 justify-content-center login-panel-control" wicket:id="sendNonce">
         </a>

diff --git a/...ain/java/com/evolveum/midpoint/authentication/impl/channel/AuthenticationChannelImpl.java b/...ain/java/com/evolveum/midpoint/authentication/impl/channel/AuthenticationChannelImpl.java
@@ -101,7 +101,7 @@ public boolean isDefault() {
     public Collection<Authorization> resolveAuthorities(Collection<Authorization> authorities) {
         var cleanedUpAuthorities = cleanupAuthorities(authorities);
         var newAuthorities = new ArrayList<>(cleanedUpAuthorities);
-        addAdditionalAuthorities(authorities);
+        addAdditionalAuthorities(newAuthorities);
         return Collections.unmodifiableList(newAuthorities);
     }