github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Check for suspended clients before issuing new AT

pull/1611/head
Manoj Garai 2024-03-14 11:48:11 +00:00
parent 4b3f1de1be
commit 17411f59e7
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ProviderTokenService.java
View File

@ -176,6 +176,10 @@ public class DefaultOAuth2ProviderTokenService implements OAuth2TokenEntityServi
throw new InvalidClientException("Client not found: " + request.getClientId()); throw new InvalidClientException("Client not found: " + request.getClientId());
} }
if (!client.isActive()) {
throw new InvalidClientException("Client is suspended: " + request.getClientId());
}
// handle the PKCE code challenge if present // handle the PKCE code challenge if present
if (request.getExtensions().containsKey(CODE_CHALLENGE)) { if (request.getExtensions().containsKey(CODE_CHALLENGE)) {
String challenge = (String) request.getExtensions().get(CODE_CHALLENGE); String challenge = (String) request.getExtensions().get(CODE_CHALLENGE);