deepen webfinger, endpoint is looser

closes #1008
pull/1016/head
Justin Richer 2016-01-29 15:38:17 -05:00
parent 193d3f8ec6
commit 61433cc23a
1 changed files with 6 additions and 3 deletions

View File

@ -101,9 +101,12 @@ public class DiscoveryEndpoint {
}
};
@RequestMapping(value={"/" + WEBFINGER_URL},
params={"resource", "rel=http://openid.net/specs/connect/1.0/issuer"}, produces = MediaType.APPLICATION_JSON_VALUE)
public String webfinger(@RequestParam("resource") String resource, Model model) {
@RequestMapping(value={"/" + WEBFINGER_URL}, produces = MediaType.APPLICATION_JSON_VALUE)
public String webfinger(@RequestParam("resource") String resource, @RequestParam(value = "rel", required = false) String rel, Model model) {
if (!Strings.isNullOrEmpty(rel) && !rel.equals("https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues")) {
logger.warn("Responding to webfinger request for non-OIDC relation: " + rel);
}
if (!resource.equals(config.getIssuer())) {
// it's not the issuer directly, need to check other methods