From 941e9544e2bc6db875b175e3833a920d8403a51e Mon Sep 17 00:00:00 2001
From: Amanda Anganes <aanganes@mitre.org>
Date: Mon, 19 Aug 2013 16:55:56 -0400
Subject: [PATCH] Compare client_ids instead of Client objects
---
.../main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java b/openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
index 3e5c50fe2..5174f5848 100644
--- a/openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
+++ b/openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
@@ -115,7 +115,7 @@ public class IntrospectionEndpoint {
if (authClient.isAllowIntrospection()) {
// if it's the same client that the token was issued to, or it at least has all the scopes the token was issued with
- if (authClient.equals(tokenClient) || authClient.getScope().containsAll(scopes)) {
+ if (authClient.getClientId().equals(tokenClient.getClientId()) || authClient.getScope().containsAll(scopes)) {
// if it's a valid token, we'll print out information on it
model.addAttribute("entity", token);