use the same encoding as on client side
see OIDCAuthenticationFilter line 336pull/1125/head
parent
58724aa6dc
commit
a7b2b7cbea
|
@ -68,7 +68,7 @@ public class UriEncodedClientUserDetailsService implements UserDetailsService {
|
|||
|
||||
if (client != null) {
|
||||
|
||||
String encodedPassword = UriUtils.encodeQueryParam(Strings.nullToEmpty(client.getClientSecret()), "UTF-8");
|
||||
String encodedPassword = UriUtils.encodePathSegment(Strings.nullToEmpty(client.getClientSecret()), "UTF-8");
|
||||
|
||||
if (config.isHeartMode() || // if we're running HEART mode turn off all client secrets
|
||||
(client.getTokenEndpointAuthMethod() != null &&
|
||||
|
|
Loading…
Reference in New Issue