Add accessTokenDO null check

wso2-extensions · Oct 11, 2021 · b951216 · b951216
1 parent a9de5bd
commit b951216
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...ntity.dpop/src/main/java/org/wso2/carbon/identity/dpop/validators/DPoPTokenValidator.java b/...ntity.dpop/src/main/java/org/wso2/carbon/identity/dpop/validators/DPoPTokenValidator.java
@@ -317,7 +317,7 @@ private boolean validateDPoP(OAuth2TokenValidationMessageContext validationReqDT
             ParseException {
 
         AccessTokenDO accessTokenDO = (AccessTokenDO) validationReqDTO.getProperty(ACCESS_TOKEN_DO);
-        if (accessTokenDO.getTokenBinding() != null &&
+        if (accessTokenDO != null && accessTokenDO.getTokenBinding() != null &&
                 DPoPConstants.OAUTH_DPOP_HEADER.equalsIgnoreCase(accessTokenDO.getTokenBinding().getBindingType())) {
             String dpopProof = getResourceFromMessageContext(validationReqDTO, DPoPConstants.OAUTH_DPOP_HEADER);
             String httpMethod = getResourceFromMessageContext(validationReqDTO, DPoPConstants.HTTP_METHOD);