diff --git a/openid-connect-client/.classpath b/openid-connect-client/.classpath index 60a139828..784c4613e 100644 --- a/openid-connect-client/.classpath +++ b/openid-connect-client/.classpath @@ -1,6 +1,7 @@ + diff --git a/openid-connect-client/.settings/org.eclipse.wst.common.component b/openid-connect-client/.settings/org.eclipse.wst.common.component index 6227d3014..d46f50e39 100755 --- a/openid-connect-client/.settings/org.eclipse.wst.common.component +++ b/openid-connect-client/.settings/org.eclipse.wst.common.component @@ -3,6 +3,5 @@ - diff --git a/openid-connect-server/.project b/openid-connect-server/.project index ede02b1be..339816821 100644 --- a/openid-connect-server/.project +++ b/openid-connect-server/.project @@ -23,12 +23,12 @@ - org.eclipse.m2e.core.maven2Builder + org.eclipse.wst.validation.validationbuilder - org.eclipse.wst.validation.validationbuilder + org.eclipse.m2e.core.maven2Builder diff --git a/openid-connect-server/.settings/org.eclipse.wst.common.component b/openid-connect-server/.settings/org.eclipse.wst.common.component index abde0c586..2db081496 100644 --- a/openid-connect-server/.settings/org.eclipse.wst.common.component +++ b/openid-connect-server/.settings/org.eclipse.wst.common.component @@ -5,12 +5,10 @@ - - - + uses - + uses diff --git a/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java b/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java index 8a40906ce..b9b0f9c75 100644 --- a/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java +++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java @@ -65,7 +65,7 @@ public class ConnectTokenEnhancer implements TokenEnhancer { token.getJwt().getClaims().setNonce(UUID.randomUUID().toString()); // set a random NONCE in the middle of it - if (token.getRefreshToken() != null) { + if (token.getRefreshToken() != null && Strings.isNullOrEmpty(token.getRefreshToken().getJwt().getClaims().getNonce())) { token.getRefreshToken().getJwt().getClaims().setNonce(UUID.randomUUID().toString()); // set a random nonce in the middle of it }