github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fixed NPE in case if algorithm is not specified

pull/1079/merge
Oleksandr Shpota 2016-09-24 11:45:34 +03:00 committed by Justin Richer
parent bb6bb81dbc
commit 476ec872ff
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
View File

@ -381,9 +381,9 @@ public class OIDCAuthenticationFilter extends AbstractAuthenticationProcessingFi
JWSAlgorithm alg = clientConfig.getTokenEndpointAuthSigningAlg(); JWSAlgorithm alg = clientConfig.getTokenEndpointAuthSigningAlg();
if (SECRET_JWT.equals(clientConfig.getTokenEndpointAuthMethod()) && if (SECRET_JWT.equals(clientConfig.getTokenEndpointAuthMethod()) &&
(alg.equals(JWSAlgorithm.HS256) (JWSAlgorithm.HS256.equals(alg)
|| alg.equals(JWSAlgorithm.HS384) || JWSAlgorithm.HS384.equals(alg)
|| alg.equals(JWSAlgorithm.HS512))) { || JWSAlgorithm.HS512.equals(alg))) {
// generate one based on client secret // generate one based on client secret
signer = symmetricCacheService.getSymmetricValidtor(clientConfig.getClient()); signer = symmetricCacheService.getSymmetricValidtor(clientConfig.getClient());