put 'kid' into JWS header, closes #784

pull/803/head
Justin Richer 2015-03-18 20:09:06 -04:00
parent 866186f611
commit 30e894a64a
1 changed files with 5 additions and 1 deletions

View File

@ -183,7 +183,11 @@ public class DefaultOIDCTokenService implements OIDCTokenService {
} else {
idClaims.setCustomClaim("kid", jwtService.getDefaultSignerKeyId());
idToken = new SignedJWT(new JWSHeader(signingAlg), idClaims);
JWSHeader header = new JWSHeader(signingAlg, null, null, null, null, null, null, null, null, null,
jwtService.getDefaultSignerKeyId(),
null, null);
idToken = new SignedJWT(header, idClaims);
// sign it with the server's key
jwtService.signJwt((SignedJWT) idToken);