github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

existence of nonce claim check added

pull/105/merge
nemonik 2012-06-19 18:14:51 -04:00
parent 94256d95a1
commit 488f01cada
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
openid-connect-client/src/main/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilter.java
View File

@ -522,8 +522,18 @@ public class AbstractOIDCAuthenticationFilter extends
// Read the paragraph describing "nonce". Required w/ implicit flow. // Read the paragraph describing "nonce". Required w/ implicit flow.
// //
//String nonce = idToken.getClaims().getClaimAsString("nonce");
String nonce = idToken.getClaims().getNonce(); String nonce = idToken.getClaims().getNonce();
if (StringUtils.isBlank(nonce)) {
logger.error("ID token did not contain a nonce claim.");
throw new AuthenticationServiceException(
"ID token did not contain a nonce claim.");
}
Cookie nonceSignatureCookie = WebUtils.getCookie(request, Cookie nonceSignatureCookie = WebUtils.getCookie(request,
NONCE_SIGNATURE_COOKIE_NAME); NONCE_SIGNATURE_COOKIE_NAME);