Changing entityID and then requesting metadata results in NullPointerException

[mrvanes]

After changing entityID via api and then requesting /metadata endpoint, Mujina crashes with a NullPointerException:

mujina-idp-1  | 2025-05-26 14:26:00,363 ERROR [http-nio-8080-exec-8] o.a.c.c.C.[.[.[/].[dispatcherServlet]:175 - Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed; nested exception is java.lang.NullPointerException: Cannot invoke "Object.getClass()" because "credential" is null] with root cause
mujina-idp-1  | java.lang.NullPointerException: Cannot invoke "Object.getClass()" because "credential" is null
mujina-idp-1  |         at org.opensaml.xml.security.x509.X509KeyInfoGeneratorFactory$X509KeyInfoGenerator.generate(X509KeyInfoGeneratorFactory.java:424)
mujina-idp-1  |         at mujina.idp.MetadataController.metadata(MetadataController.java:96)
mujina-idp-1  |         at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
mujina-idp-1  |         at java.base/java.lang.reflect.Method.invoke(Method.java:580)
mujina-idp-1  |         at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205)
mujina-idp-1  |         at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150)
mujina-idp-1  |         at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117)
mujina-idp-1  |         at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895)
mujina-idp-1  |         at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:808)
mujina-idp-1  |         at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)
mujina-idp-1  |         at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1072)
mujina-idp-1  |         at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:965)
mujina-idp-1  |         at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006)
mujina-idp-1  |         at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:898)
mujina-idp-1  |         at javax.servlet.http.HttpServlet.service(HttpServlet.java:645)
mujina-idp-1  |         at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883)
mujina-idp-1  |         at javax.servlet.http.HttpServlet.service(HttpServlet.java:750)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:209)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:337)
mujina-idp-1  |         at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:115)
mujina-idp-1  |         at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:81)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:122)
mujina-idp-1  |         at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:116)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:126)
mujina-idp-1  |         at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:81)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:109)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:149)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:223)
mujina-idp-1  |         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:217)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:223)
mujina-idp-1  |         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:217)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at mujina.idp.ForceAuthnFilter.doFilterInternal(ForceAuthnFilter.java:26)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:103)
mujina-idp-1  |         at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:89)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter(HeaderWriterFilter.java:90)
mujina-idp-1  |         at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:75)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:112)
mujina-idp-1  |         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:82)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:55)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.session.DisableEncodeUrlFilter.doFilterInternal(DisableEncodeUrlFilter.java:42)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:346)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:221)
mujina-idp-1  |         at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:186)
mujina-idp-1  |         at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:354)
mujina-idp-1  |         at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:267)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:96)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
mujina-idp-1  |         at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:178)
mujina-idp-1  |         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:153)
mujina-idp-1  |         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:168)
mujina-idp-1  |         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
mujina-idp-1  |         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:481)
mujina-idp-1  |         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130)
mujina-idp-1  |         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
mujina-idp-1  |         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
mujina-idp-1  |         at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:765)
mujina-idp-1  |         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
mujina-idp-1  |         at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:390)
mujina-idp-1  |         at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
mujina-idp-1  |         at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928)
mujina-idp-1  |         at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1794)
mujina-idp-1  |         at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
mujina-idp-1  |         at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
mujina-idp-1  |         at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
mujina-idp-1  |         at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
mujina-idp-1  |         at java.base/java.lang.Thread.run(Thread.java:1583)