add null check for recoveryInformationDTO

wso2 · Nov 18, 2023 · 8e9e7e8 · 8e9e7e8
1 parent 70dec97
commit 8e9e7e8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/...org/wso2/carbon/identity/rest/api/user/recovery/v1/impl/core/PasswordRecoveryService.java b/...org/wso2/carbon/identity/rest/api/user/recovery/v1/impl/core/PasswordRecoveryService.java
@@ -437,8 +437,14 @@ private AccountRecoveryType buildPasswordRecoveryInitResponse(String tenantDomai
                                                                   RecoveryInformationDTO recoveryInformationDTO) {
 
         AccountRecoveryType accountRecoveryType = null;
+
+        if (recoveryInformationDTO == null) {
+            return accountRecoveryType;
+        }
+
         boolean isNotificationBasedRecoveryEnabled = recoveryInformationDTO.isNotificationBasedRecoveryEnabled();
         boolean isQuestionBasedRecoveryAllowedForUser = recoveryInformationDTO.isQuestionBasedRecoveryAllowedForUser();
+
         if (isNotificationBasedRecoveryEnabled) {
             // Build next API calls list.
             ArrayList<APICall> apiCallsArrayList = new ArrayList<>();