[jira] [Created] (NIFI-5905) Secure S2S fails with NullPointerException

["Koji Kawamura (JIRA)" <ji...@apache.org>]

Koji Kawamura created NIFI-5905:
-----------------------------------

             Summary: Secure S2S fails with NullPointerException
                 Key: NIFI-5905
                 URL: https://issues.apache.org/jira/browse/NIFI-5905
             Project: Apache NiFi
          Issue Type: Bug
          Components: Core Framework
    Affects Versions: 1.9.0
            Reporter: Koji Kawamura
            Assignee: Koji Kawamura
             Fix For: 1.9.0


NIFI-5769 refactored FlowController into smaller classes like StandardFlowManager, and introduced this issue.

When StandardFlowManager is instantiated, authorizer is carried from FlowController, but FlowController's authorizer hasn't been set at this point. And causes NPE later.
https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-framework-core/src/main/java/org/apache/nifi/controller/FlowController.java#L486

{code}
2018-12-18 09:53:13,042 ERROR [NiFi Web Server-438] o.a.nifi.web.api.config.ThrowableMapper An unexpected error has occurred: java.lang.NullPointerException. Returning Internal Server Error response.
java.lang.NullPointerException: null
        at org.apache.nifi.authorization.resource.Authorizable.checkAuthorization(Authorizable.java:124)
        at org.apache.nifi.authorization.resource.DataAuthorizable.checkAuthorization(DataAuthorizable.java:71)
        at org.apache.nifi.authorization.resource.Authorizable.checkAuthorization(Authorizable.java:183)
        at org.apache.nifi.remote.StandardRootGroupPort.checkUserAuthorization(StandardRootGroupPort.java:386)
        at org.apache.nifi.authorization.StandardAuthorizableLookup$8.checkAuthorization(StandardAuthorizableLookup.java:223)
        at org.apache.nifi.web.api.DataTransferResource.authorizeDataTransfer(DataTransferResource.java:146)
        at org.apache.nifi.web.api.DataTransferResource.lambda$createPortTransaction$0(DataTransferResource.java:192)
        at org.apache.nifi.web.StandardNiFiServiceFacade.authorizeAccess(StandardNiFiServiceFacade.java:374)
        at org.apache.nifi.web.StandardNiFiServiceFacade$$FastClassBySpringCGLIB$$358780e0.invoke(<generated>)
        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:736)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
        at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:671)
        at org.apache.nifi.web.StandardNiFiServiceFacade$$EnhancerBySpringCGLIB$$e3909da1.authorizeAccess(<generated>)
        at org.apache.nifi.web.api.DataTransferResource.createPortTransaction(DataTransferResource.java:191)
        at sun.reflect.GeneratedMethodAccessor78.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
{code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)