Change to use copyof in getSecurityRoles in AuthCredentials class

Signed-off-by: Ryan Liang <jiallian@amazon.com>
peternied · Aug 25, 2023 · a805843 · a805843
1 parent 308f269
commit a805843
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/opensearch/security/user/AuthCredentials.java b/src/main/java/org/opensearch/security/user/AuthCredentials.java
@@ -222,7 +222,7 @@ public Set<String> getBackendRoles() {
      * @return Defensive copy of the security roles this user is member of.
      */
     public Set<String> getSecurityRoles() {
-        return new HashSet<String>(securityRoles);
+        return Set.copyOf(securityRoles);
     }
 
     public boolean isComplete() {