OIDC refresh token optionality fix (#8336)

Signed-off-by: David Kral <david.k.kral@oracle.com>
helidon-io · Feb 15, 2024 · 5140f9c · 5140f9c
1 parent ab60ba4
commit 5140f9c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/security/providers/oidc/src/main/java/io/helidon/security/providers/oidc/OidcFeature.java b/security/providers/oidc/src/main/java/io/helidon/security/providers/oidc/OidcFeature.java
@@ -518,7 +518,9 @@ private String processJsonResponse(ServerResponse res,
 
                 headers.addCookie(tenantCookieHandler.createCookie(tenantName).build()); //Add tenant name cookie
                 headers.addCookie(tokenCookieHandler.createCookie(accessToken).build());  //Add token cookie
-                headers.addCookie(refreshTokenCookieHandler.createCookie(refreshToken).build());  //Add refresh token cookie
+                if (refreshToken != null) {
+                    headers.addCookie(refreshTokenCookieHandler.createCookie(refreshToken).build());  //Add refresh token cookie
+                }
 
                 if (idToken != null) {
                     headers.addCookie(idTokenCookieHandler.createCookie(idToken).build());  //Add token id cookie