-
Type:
Improvement
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 10.10, 11.1-SNAPSHOT
-
Fix Version/s: 10.10-HF06, 11.1, 2021.0
-
Component/s: Authentication, OAuth
-
Backlog priority:200
-
Sprint:nxcore 11.1.8 / 11.1.9
-
Story Points:2
We want to improve error handling in NuxeoOAuth2Servlet when the received token can not be verified.
This can happen if no nuxeo.jwt.secret is configured in nuxeo.conf or if the received token is not valid against this secret.
Current situation leads to a NPE in NuxeoOAuth2Servlet when retrieving the user from claims.
- is related to
-
NEV-67 Change used token from JWT to OAuth2 in ARender
-
- Resolved
-
