diff --git a/core/src/main/java/org/acegisecurity/ui/rememberme/TokenBasedRememberMeServices.java b/core/src/main/java/org/acegisecurity/ui/rememberme/TokenBasedRememberMeServices.java index 1e7cf23ba1..4828cfff82 100644 --- a/core/src/main/java/org/acegisecurity/ui/rememberme/TokenBasedRememberMeServices.java +++ b/core/src/main/java/org/acegisecurity/ui/rememberme/TokenBasedRememberMeServices.java @@ -285,6 +285,11 @@ public class TokenBasedRememberMeServices implements RememberMeServices, Initial username = successfulAuthentication.getPrincipal().toString(); password = successfulAuthentication.getCredentials().toString(); } + + // If unable to find a username and password, just abort as TokenBasedRememberMeServices unable to construct a valid token in this case + if (!StringUtils.hasLength(username) || !StringUtils.hasLength(password)) { + return; + } Assert.hasLength(username); Assert.hasLength(password);