From 1efe7a1fc3cfbe1a3635ea2b42cfa208f41871b6 Mon Sep 17 00:00:00 2001 From: Mike Derryberry Date: Wed, 25 Jul 2012 09:21:34 -0400 Subject: [PATCH] updated check of algorithm in signing method" --- .../src/main/java/org/mitre/jwt/signer/AbstractJwtSigner.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/openid-connect-common/src/main/java/org/mitre/jwt/signer/AbstractJwtSigner.java b/openid-connect-common/src/main/java/org/mitre/jwt/signer/AbstractJwtSigner.java index 8bb96aee3..5a8f64319 100644 --- a/openid-connect-common/src/main/java/org/mitre/jwt/signer/AbstractJwtSigner.java +++ b/openid-connect-common/src/main/java/org/mitre/jwt/signer/AbstractJwtSigner.java @@ -19,6 +19,8 @@ import java.security.NoSuchAlgorithmException; import java.util.List; import org.mitre.jwt.model.Jwt; + +import com.google.common.base.Objects; import com.google.common.base.Splitter; import com.google.common.base.Strings; import com.google.common.collect.Lists; @@ -61,7 +63,7 @@ public abstract class AbstractJwtSigner implements JwtSigner { // algorithm type doesn't match // TODO: should this be an error or should we just fix it in the incoming jwt? // for now, we fix the Jwt - jwt.getHeader().setAlgorithm(algorithm); + jwt.getHeader().setAlgorithm(algorithm.getJwaName()); }*/ String sig = generateSignature(jwt.getSignatureBase());