FINERACT-2391: check for AppUser type before casting Authentication Principal

2025-10-15 15:02:25 +02:00
parent b9e6f21e18
commit f193bbbdf1
1 changed files with 1 additions and 1 deletions
@@ -35,7 +35,7 @@ public class AuditorAwareImpl implements AuditorAware<Long> {
        final SecurityContext securityContext = SecurityContextHolder.getContext();
        if (securityContext != null) {
            final Authentication authentication = securityContext.getAuthentication();
-            if (authentication != null) {
+            if (authentication != null && authentication.getPrincipal() instanceof AppUser) {
                currentUserId = Optional.ofNullable(((AppUser) authentication.getPrincipal()).getId());
            } else {
                currentUserId = retrieveSuperUser();