Merge pull request #4038 from zlamalp/fix

fix(core): handle missing referer header

Author: zlamalp

perun-core/src/main/java/cz/metacentrum/perun/core/blImpl/AuthzResolverBlImpl.java

@@ -2599,10 +2599,12 @@ public static synchronized void refreshAuthz(PerunSession sess) {
 		Map<String, List<String>> appAllowedRoles = BeansUtils.getCoreConfig().getAppAllowedRoles();
 		for (String reg : appAllowedRoles.keySet()) {
 			Pattern pattern = Pattern.compile(reg);
-			if (pattern.matcher(sess.getPerunPrincipal().getReferer()).matches()) {
-				for (String role : roles.getRolesNames()) {
-					if (!appAllowedRoles.get(reg).contains(role)) {
-						roles.remove(role);
+			if (!isBlank(sess.getPerunPrincipal().getReferer())) {
+				if (pattern.matcher(sess.getPerunPrincipal().getReferer()).matches()) {
+					for (String role : roles.getRolesNames()) {
+						if (!appAllowedRoles.get(reg).contains(role)) {
+							roles.remove(role);
+						}
 					}
 				}
 			}