Add null check for endpoint testing

Signed-off-by: Ryan Liang <jiallian@amazon.com>
RyanL1997 · Oct 11, 2023 · 3f542db · 3f542db
1 parent 2a91082
commit 3f542db
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/test/java/org/opensearch/security/http/OnBehalfOfAuthenticatorTest.java b/src/test/java/org/opensearch/security/http/OnBehalfOfAuthenticatorTest.java
@@ -489,13 +489,15 @@ public void testRequestNotAllowed() {
         Mockito.when(mockedRequest1.path()).thenReturn(SECURITY_PREFIX + ON_BEHALF_OF_SUFFIX);
         Mockito.when(mockedRequest1.method()).thenReturn(POST);
         Assert.assertFalse(oboAuth.isRequestAllowed(mockedRequest1));
+        Assert.assertNull(oboAuth.extractCredentials(mockedRequest1, null));
 
         // Test PUT on password changing endpoint
         SecurityRequest mockedRequest2 = mock(SecurityRequest.class);
         Mockito.when(mockedRequest2.header(HttpHeaders.AUTHORIZATION)).thenReturn("Bearer someToken");
         Mockito.when(mockedRequest2.path()).thenReturn(SECURITY_PREFIX + ACCOUNT_SUFFIX);
         Mockito.when(mockedRequest2.method()).thenReturn(PUT);
         Assert.assertFalse(oboAuth.isRequestAllowed(mockedRequest2));
+        Assert.assertNull(oboAuth.extractCredentials(mockedRequest2, null));
     }
 
     /** extracts a default user credential from a request header */