diff --git a/openid-connect-server/src/main/java/org/mitre/openid/connect/request/ConnectOAuth2RequestFactory.java b/openid-connect-server/src/main/java/org/mitre/openid/connect/request/ConnectOAuth2RequestFactory.java index dd76c18f9..06d860c59 100644 --- a/openid-connect-server/src/main/java/org/mitre/openid/connect/request/ConnectOAuth2RequestFactory.java +++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/request/ConnectOAuth2RequestFactory.java @@ -179,8 +179,6 @@ public class ConnectOAuth2RequestFactory extends DefaultOAuth2RequestFactory { try { JWT jwt = JWTParser.parse(jwtString); - // TODO: move keys to constants - if (jwt instanceof SignedJWT) { // it's a signed JWT, check the signature