oxAuth #955

GluuFederation · Dec 5, 2018 · 27e3024 · 27e3024
1 parent d8e2c8c
commit 27e3024
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Server/src/main/java/org/xdi/oxauth/model/authorize/ScopeChecker.java b/Server/src/main/java/org/xdi/oxauth/model/authorize/ScopeChecker.java
@@ -46,6 +46,11 @@ public Set<String> checkScopesPolicy(Client client, String scope) {
         final String[] scopesRequested = scope.split(" ");
         final String[] scopesAllowed = client.getScopes();
 
+        // ocAuth #955
+        if (scopesAllowed == null) {
+            return grantedScopes;
+        }
+
         for (String scopeRequested : scopesRequested) {
             if (StringUtils.isNotBlank(scopeRequested)) {
                 for (String scopeAllowedDn : scopesAllowed) {