diff --git a/src/GraphQL.Authorization/AuthorizationValidationRule.cs b/src/GraphQL.Authorization/AuthorizationValidationRule.cs
index 3d7e789..cb22620 100644
--- a/src/GraphQL.Authorization/AuthorizationValidationRule.cs
+++ b/src/GraphQL.Authorization/AuthorizationValidationRule.cs
@@ -77,7 +77,8 @@ public Task<INodeVisitor> ValidateAsync(ValidationContext context)
                     // If some supplied field does not exist in the variable type then some other
                     // validation rule should check that but here we should just ignore that
                     // "unknown" field.
-                    if (context.Inputs.TryGetValue(variableRef.Name, out object input) &&
+                    if (context.Inputs != null &&
+                        context.Inputs.TryGetValue(variableRef.Name, out object input) &&
                         input is Dictionary<string, object> fieldsValues)
                     {
                         foreach (var field in variableType.Fields)