Skip to content

Exception not handled properly in Id4meLogon#getPayloadFromJwt

The method Id4meLogon#getPayloadFromJwt ignores an Exception when parsing a JSON web token and returns null in that case.

However, in two places where that method is called (Id4meLogon#getDistributedClaims and Id4meLogon#getUserInfo) the value returned by Id4meLogon#getPayloadFromJwt is not checked against null, so a NullPointerException would be thrown here if an error occurred when parsing the JSON web token.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information