JSON object member with key "scope" has null value

[Vincent Ricard]

Hi,

‌

I use Spring security 5 to make some oauth authorizations. One of my partners returns this kind of oauth response:

{"access_token":"valid access token with a lot of characters","expires_in":1800,"
token_type":"bearer","scope":null,"refresh_token":"valid refresh token"}

With this response, i get the following exception:

com.nimbusds.oauth2.sdk.ParseException: JSON object member with key "scope" has null value

According to the specification, the ‘scope’ attribute is optional. I read through the source code, and it seems the Scope#parse method handles the null value:

if (s == null)
   return null;

So, do you think you can remove the check about the exception?

‌

Regards

[Vincent Ricard]

Maybe we could change (in BearerAccessToken#parse)

if (jsonObject.containsKey("scope"))
   scope = Scope.parse(JSONObjectUtils.getString(jsonObject, "scope"));

to

if (jsonObject.containsKey("scope"))
   scope = Scope.parse(JSONObjectUtils.getString(jsonObject, "scope", null));

‌

[Connect2id OSS]

Thanks for the detailed report, we’ll fix that.

[Connect2id OSS]

Fixed: 54882512

[Connect2id OSS]

Released as version 6.18.1 (2019-11-18)