Require non-null authenticationRequest

jzheaux · jzheaux · commit ef76ba040d02 · 2026-03-11T16:45:23.000-06:00
Closes gh-18880 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
diff --git a/saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/CacheSaml2AuthenticationRequestRepository.java b/saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/CacheSaml2AuthenticationRequestRepository.java
@@ -52,6 +52,7 @@ public AbstractSaml2AuthenticationRequest loadAuthenticationRequest(HttpServletR
 	@Override
 	public void saveAuthenticationRequest(AbstractSaml2AuthenticationRequest authenticationRequest,
 			HttpServletRequest request, HttpServletResponse response) {
+		Assert.notNull(authenticationRequest, "authenticationRequest must not be null");
 		String relayState = request.getParameter(Saml2ParameterNames.RELAY_STATE);
 		Assert.notNull(relayState, "relayState must not be null");
 		this.cache.put(relayState, authenticationRequest);
