fix crash when introspection_client_auth_bearer_token is not set
@@ -80,7 +80,9 @@ static apr_byte_t oidc_oauth_validate_access_token(request_rec *r, oidc_cfg *c,
apr_table_addn(params, c->oauth.introspection_token_param_name, token);
const char *bearer_access_token_auth =
- strcmp(c->oauth.introspection_client_auth_bearer_token, "") == 0 ?
+ ((c->oauth.introspection_client_auth_bearer_token != NULL)
+ && strcmp(c->oauth.introspection_client_auth_bearer_token,
+ "") == 0) ?
apr_table_get(params, token) :
c->oauth.introspection_client_auth_bearer_token;
