github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge branch 'mitreaccounts'

pull/59/head
Justin Richer 2012-03-23 10:52:36 -04:00
parent 02d0471acf 4a15e51e12
commit 34f24deb3e
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectAuthCodeTokenGranter.java
View File

@ -170,6 +170,8 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
idToken.getClaims().setIssuer(configBean.getIssuer());
// TODO: expiration? other fields?
idToken.getClaims().setClaim("nonce", unconfirmedAuthorizationRequest.getParameters().get("nonce"));
//Sign
//TODO: check client to see if they have a preferred alg, attempt to use that

9
openid-connect-server/src/main/webapp/WEB-INF/spring/application-context.xml
View File

@ -68,8 +68,13 @@
<security:authentication-manager alias="springSecurityAuthenticationManager">
<security:authentication-provider>
<security:user-service id="userDetailsService">
<security:user name="jimi" password="jimispassword" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="bob" password="bobspassword" authorities="ROLE_USER" />
<security:user name="jricher" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="mfranklin" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="dcuomo" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="mjett" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="aanganes" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="mjwalsh" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
<security:user name="srmoore" password="password" authorities="ROLE_USER, ROLE_ADMIN" />
</security:user-service>
</security:authentication-provider>
</security:authentication-manager>