#849 | Add null check for invalid username

avniproject · Jan 16, 2025 · 0a78ce4 · 0a78ce4
1 parent 0c1b543
commit 0a78ce4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/avni-server-api/src/main/java/org/avni/server/web/api/UserLoginApiController.java b/avni-server-api/src/main/java/org/avni/server/web/api/UserLoginApiController.java
@@ -27,6 +27,9 @@ public UserLoginApiController(AuthService authService, UserRepository userReposi
     @RequestMapping(value = "/api/user/generateToken", method = RequestMethod.POST)
     public ResponseEntity<GenerateTokenResult> generateTokenForUser(@RequestBody GenerateTokenRequest request) throws EntityNotFoundException {
         User user = userRepository.findByUsername(request.getUsername());
+        if (user == null) {
+            throw new EntityNotFoundException("User not found with username: " + request.getUsername());
+        }
         if (!user.getUserSettings().isAllowedToInvokeTokenGenerationAPI()) {
             throw AvniAccessException.createForUserNotAllowedTokenGeneration(user);
         }