From 7650897ab5e3e37e88be59132c3ccde8a6532a2a Mon Sep 17 00:00:00 2001
From: Manoj <manoj@fynarfin.io>
Date: Fri, 28 Aug 2020 04:39:49 +0530
Subject: [PATCH] FINERACT-1120-TFA-authentication-issue-fix

---
 .../security/filter/TwoFactorAuthenticationFilter.java          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/filter/TwoFactorAuthenticationFilter.java b/fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/filter/TwoFactorAuthenticationFilter.java
index 6758c552b..f1a668b89 100644
--- a/fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/filter/TwoFactorAuthenticationFilter.java
+++ b/fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/filter/TwoFactorAuthenticationFilter.java
@@ -78,7 +78,7 @@ public class TwoFactorAuthenticationFilter extends GenericFilterBean {
         }
 
         // Process two-factor only when user is authenticated
-        if (authentication != null && authentication.isAuthenticated()) {
+        if (authentication != null && authentication.isAuthenticated() && authentication.getPrincipal() instanceof AppUser) {
             AppUser user = (AppUser) authentication.getPrincipal();
 
             if (user == null) {