From 32540dd8f670b03aace9369f3f5d257aaec5ad95 Mon Sep 17 00:00:00 2001
From: Travis Spencer <travis@curity.io>
Date: Sat, 28 Sep 2019 14:21:01 +0200
Subject: [PATCH] Don't add scopes if none are provided

---
 .../org/eclipse/jetty/security/openid/OpenIdConfiguration.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java b/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java
index 3d14aa2d36c7..f3c9134b4a0d 100644
--- a/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java
+++ b/jetty-openid/src/main/java/org/eclipse/jetty/security/openid/OpenIdConfiguration.java
@@ -131,7 +131,8 @@ public String getTokenEndpoint()
 
     public void addScopes(String... scopes)
     {
-        Collections.addAll(this.scopes, scopes);
+        if (scopes != null)
+            Collections.addAll(this.scopes, scopes);
     }
 
     public List<String> getScopes()