Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value.

11 years ago · 3eae6f2789
parent 0059c7b4cc
commit 3eae6f2789
1 changed files with 1 additions and 1 deletions
--- a/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
+++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
@ -91,7 +91,7 @@ public class ConnectTokenEnhancer implements TokenEnhancer {

 		JWSAlgorithm signingAlg; 
 		JWSAlgorithm clientAlg = client.getIdTokenSignedResponseAlg().getAlgorithm();
-		if (clientAlg != JWSAlgorithm.NONE) {
+		if (clientAlg != null) {
 			signingAlg = clientAlg;
 		} else {
 			signingAlg = jwtService.getDefaultSigningAlgorithm();