Add the null or empty check for signingkey in keyUtils

Signed-off-by: Ryan Liang <[email protected]>
peternied · Aug 25, 2023 · 308f269 · 308f269
1 parent 40eed32
commit 308f269
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/org/opensearch/security/util/KeyUtils.java b/src/main/java/org/opensearch/security/util/KeyUtils.java
@@ -15,6 +15,7 @@
 import io.jsonwebtoken.Jwts;
 import org.apache.logging.log4j.Logger;
 import org.opensearch.SpecialPermission;
+import org.opensearch.core.common.Strings;
 
 import java.security.*;
 import java.security.spec.InvalidKeySpecException;
@@ -36,7 +37,7 @@ public static JwtParserBuilder createJwtParserBuilderFromSigningKey(final String
         jwtParserBuilder = AccessController.doPrivileged(new PrivilegedAction<JwtParserBuilder>() {
             @Override
             public JwtParserBuilder run() {
-                if (signingKey == null || signingKey.length() == 0) {
+                if (Strings.isNullOrEmpty(signingKey)) {
                     log.error("Unable to find signing key");
                     return null;
                 } else {