made auth request url builder handle multiple keys
parent
eb1ea4c0b8
commit
0d6775dfa8
|
@ -31,6 +31,7 @@ import org.mitre.openid.connect.config.ServerConfiguration;
|
||||||
import org.springframework.security.authentication.AuthenticationServiceException;
|
import org.springframework.security.authentication.AuthenticationServiceException;
|
||||||
|
|
||||||
import com.google.common.base.Joiner;
|
import com.google.common.base.Joiner;
|
||||||
|
import com.nimbusds.jose.JWSAlgorithm;
|
||||||
import com.nimbusds.jose.JWSHeader;
|
import com.nimbusds.jose.JWSHeader;
|
||||||
import com.nimbusds.jwt.JWTClaimsSet;
|
import com.nimbusds.jwt.JWTClaimsSet;
|
||||||
import com.nimbusds.jwt.SignedJWT;
|
import com.nimbusds.jwt.SignedJWT;
|
||||||
|
@ -73,11 +74,14 @@ public class SignedAuthRequestUrlBuilder implements AuthRequestUrlBuilder {
|
||||||
claims.setClaim(option.getKey(), option.getValue());
|
claims.setClaim(option.getKey(), option.getValue());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
JWSAlgorithm alg = clientConfig.getRequestObjectSigningAlg();
|
||||||
|
if (alg == null) {
|
||||||
|
alg = signingAndValidationService.getDefaultSigningAlgorithm();
|
||||||
|
}
|
||||||
|
|
||||||
|
SignedJWT jwt = new SignedJWT(new JWSHeader(alg), claims);
|
||||||
|
|
||||||
SignedJWT jwt = new SignedJWT(new JWSHeader(signingAndValidationService.getDefaultSigningAlgorithm()), claims);
|
signingAndValidationService.signJwt(jwt, alg);
|
||||||
|
|
||||||
signingAndValidationService.signJwt(jwt);
|
|
||||||
|
|
||||||
try {
|
try {
|
||||||
URIBuilder uriBuilder = new URIBuilder(serverConfig.getAuthorizationEndpointUri());
|
URIBuilder uriBuilder = new URIBuilder(serverConfig.getAuthorizationEndpointUri());
|
||||||
|
|
Loading…
Reference in New Issue