https://github.com/spring-projects/spring-security/blob/1de0cf5057d755bcf25ef0db60297d42e2852f45/crypto/src/main/java/org/springframework/security/crypto/bcrypt/BCryptPasswordEncoder.java#L108
BCryptPasswordEncoder.encode() throws a Null Pointer Exception (NPE) when passing in a null rawPassword and then rawPassword.toString() is called inside the method.
This method can and should be made null-safe, either: - check for null and return null, or - throw some kind of exception
Comment From: rwinch
@alan-czajkowski We don't want to return null for the encoding, but I'd be open to returning an IllegalArgumentException. Would you be willing to submit a PR?
Comment From: alan-czajkowski
@rwinch I'll submit a PR
Comment From: alan-czajkowski
@rwinch done: #8330