Add null check for ApiKeyPair in getUserByApiKey

The function getUserByApiKey was not checking for null pointers. I think this is safe from the perspective of security, but this is a smell. And it can be easily addressed with the same solution used in line 3160.
apache · daviftorres · Oct 21, 2025 · Nov 4, 2025 · Nov 18, 2025 · Mar 6, 2026
commit a8499255affb8a36745c1c19aec917b88fd465e2
diff --git a/server/src/main/java/com/cloud/user/AccountManagerImpl.java b/server/src/main/java/com/cloud/user/AccountManagerImpl.java
@@ -3828,6 +3828,9 @@ public void buildACLViewSearchCriteria(SearchCriteria<? extends ControlledViewEn
     @Override
     public UserAccount getUserByApiKey(String apiKey) {
         ApiKeyPairVO keyPair = apiKeyPairDao.findByApiKey(apiKey);
+        if (keyPair == null) {
+            return null;
+        }
         return userAccountDao.findById(keyPair.getUserId());
     }