Return null for obo authenticator

Signed-off-by: Ryan Liang <jiallian@amazon.com>
RyanL1997 · Oct 11, 2023 · 07be8e1 · 07be8e1
1 parent 0cc1896
commit 07be8e1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java b/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java
@@ -188,6 +188,7 @@ private AuthCredentials extractCredentials0(final SecurityRequest request) {
 
         } catch (WeakKeyException e) {
             log.error("Cannot authenticate user with JWT because of ", e);
+            return null;
         } catch (Exception e) {
             if (log.isDebugEnabled()) {
                 log.debug("Invalid or expired JWT token.", e);