Avoid NPE when there is no grant #1499

GluuFederation · Nov 25, 2020 · ebd7f2b · ebd7f2b
1 parent 45d678a
commit ebd7f2b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Server/src/main/java/org/gluu/oxauth/introspection/ws/rs/IntrospectionWebService.java b/Server/src/main/java/org/gluu/oxauth/introspection/ws/rs/IntrospectionWebService.java
@@ -160,7 +160,7 @@ private Response introspect(String p_authorization, String p_token, String token
             }
 
             // Make scopes conform as required by spec, see #1499
-            if (!appConfiguration.getIntrospectionResponseScopesBackwardCompatibility()) {
+            if (response.getScope()!= null && !appConfiguration.getIntrospectionResponseScopesBackwardCompatibility()) {
             	String scopes = StringUtils.join(response.getScope().toArray(), " ");
             	responseAsJsonObject.put("scope", scopes);
             }