fix(core): add null check to auth in FiatPermissionEvaluator.getUsern…

…ame (#435)
spinnaker · Jul 3, 2019 · f228238 · f228238
1 parent bd52240
commit f228238
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java b/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java
@@ -303,7 +303,9 @@ public static Optional<AuthorizationFailure> getAuthorizationFailure() {
 
   private String getUsername(Authentication authentication) {
     String username = "anonymous";
-    if (authentication.isAuthenticated() && authentication.getPrincipal() != null) {
+    if (authentication != null
+        && authentication.isAuthenticated()
+        && authentication.getPrincipal() != null) {
       Object principal = authentication.getPrincipal();
       if (principal instanceof User) {
         username = ((User) principal).getUsername();