github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

updated signing request object in OIDC client by pulling out construction of JWT to its own method.

pull/166/merge
Mike Derryberry 2012-07-23 14:13:45 -04:00 committed by Justin Richer
parent 76c91ea79f
commit 685734ce35
1 changed files with 39 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCSignedRequestFilter.java
View File

@ -87,6 +87,22 @@ public class OIDCSignedRequestFilter extends AbstractOIDCAuthenticationFilter {
if(StringUtils.isNotBlank(request.getParameter("token"))) { if(StringUtils.isNotBlank(request.getParameter("token"))) {
Jwt jwt = createAndSignRequestJwt(request, serverConfiguration);
Map<String, String> urlVariables = new HashMap<String, String>();
urlVariables.put("request", jwt.toString());
String authRequest = AbstractOIDCAuthenticationFilter.buildURL(serverConfiguration.getAuthorizationEndpointURI(), urlVariables);
logger.debug("Auth Request: " + authRequest);
response.sendRedirect(authRequest);
}
}
public Jwt createAndSignRequestJwt(HttpServletRequest request, OIDCServerConfiguration serverConfiguration) {
Jwt jwt = new Jwt(); Jwt jwt = new Jwt();
JwtHeader header = jwt.getHeader(); JwtHeader header = jwt.getHeader();
JwtClaims claims = jwt.getClaims(); JwtClaims claims = jwt.getClaims();
@ -121,17 +137,7 @@ public class OIDCSignedRequestFilter extends AbstractOIDCAuthenticationFilter {
throw new IllegalArgumentException(header.getAlgorithm() + " is not a valid signing algorithm."); throw new IllegalArgumentException(header.getAlgorithm() + " is not a valid signing algorithm.");
} }
Map<String, String> urlVariables = new HashMap<String, String>(); return jwt;
urlVariables.put("request", jwt.toString());
String authRequest = AbstractOIDCAuthenticationFilter.buildURL(serverConfiguration.getAuthorizationEndpointURI(), urlVariables);
logger.debug("Auth Request: " + authRequest);
response.sendRedirect(authRequest);
}
} }
} }