Add check for the principal of subject whether is null

apache · Nov 7, 2018 · 9c58d30 · 9c58d30
1 parent f782eb1
commit 9c58d30
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/src/main/java/org/apache/shiro/web/filter/authc/AuthenticationFilter.java b/web/src/main/java/org/apache/shiro/web/filter/authc/AuthenticationFilter.java
@@ -78,7 +78,7 @@ public void setSuccessUrl(String successUrl) {
      */
     protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) {
         Subject subject = getSubject(request, response);
-        return subject.isAuthenticated();
+        return subject.isAuthenticated() && subject.getPrincipal() != null;
     }
 
     /**