spring-projects
diff --git a/‎core/src/main/java/org/springframework/security/access/vote/AuthenticatedVoter.java
Copy file name to clipboardExpand all lines: core/src/main/java/org/springframework/security/access/vote/AuthenticatedVoter.java
+1-1Lines changed: 1 addition & 1 deletion b/‎core/src/main/java/org/springframework/security/access/vote/AuthenticatedVoter.java
Copy file name to clipboardExpand all lines: core/src/main/java/org/springframework/security/access/vote/AuthenticatedVoter.java
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/‎core/src/test/java/org/springframework/security/access/vote/AuthenticatedVoterTests.java
Copy file name to clipboardExpand all lines: core/src/test/java/org/springframework/security/access/vote/AuthenticatedVoterTests.java
+3Lines changed: 3 additions & 0 deletions b/‎core/src/test/java/org/springframework/security/access/vote/AuthenticatedVoterTests.java
Copy file name to clipboardExpand all lines: core/src/test/java/org/springframework/security/access/vote/AuthenticatedVoterTests.java
+3Lines changed: 3 additions & 0 deletions
@@ -57,7 +57,7 @@ public class AuthenticatedVoter implements AccessDecisionVoter<Object> {
 	private AuthenticationTrustResolver authenticationTrustResolver = new AuthenticationTrustResolverImpl();
 
 	private boolean isFullyAuthenticated(Authentication authentication) {
-		return (!this.authenticationTrustResolver.isAnonymous(authentication)
+		return authentication != null && (!this.authenticationTrustResolver.isAnonymous(authentication)
 				&& !this.authenticationTrustResolver.isRememberMe(authentication));
 	}
 
 
@@ -59,6 +59,7 @@ public void testAnonymousWorks() {
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createAnonymous(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createRememberMe(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createFullyAuthenticated(), null, def));
+		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(null, null, def));
 	}
 
 	@Test
@@ -68,6 +69,7 @@ public void testFullyWorks() {
 		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(createAnonymous(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(createRememberMe(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createFullyAuthenticated(), null, def));
+		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(null, null, def));
 	}
 
 	@Test
@@ -77,6 +79,7 @@ public void testRememberMeWorks() {
 		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(createAnonymous(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createRememberMe(), null, def));
 		assertThat(AccessDecisionVoter.ACCESS_GRANTED).isEqualTo(voter.vote(createFullyAuthenticated(), null, def));
+		assertThat(AccessDecisionVoter.ACCESS_DENIED).isEqualTo(voter.vote(null, null, def));
 	}
 
 	@Test
Original file line number	Diff line number	Diff line change
`@@ -57,7 +57,7 @@ public class AuthenticatedVoter implements AccessDecisionVoter<Object> {`
`57`	`57`	`private AuthenticationTrustResolver authenticationTrustResolver = new AuthenticationTrustResolverImpl();`
`58`	`58`
`59`	`59`	`private boolean isFullyAuthenticated(Authentication authentication) {`
`60`		`- return (!this.authenticationTrustResolver.isAnonymous(authentication)`
	`60`	`+ return authentication != null && (!this.authenticationTrustResolver.isAnonymous(authentication)`
`61`	`61`	`&& !this.authenticationTrustResolver.isRememberMe(authentication));`
`62`	`62`	`}`
`63`	`63`