use the same encoding as on client side

see OIDCAuthenticationFilter line 336
pull/1125/head
ngriesser 2016-09-21 15:57:40 +02:00 committed by GitHub
parent 58724aa6dc
commit a7b2b7cbea
1 changed files with 1 additions and 1 deletions

View File

@ -68,7 +68,7 @@ public class UriEncodedClientUserDetailsService implements UserDetailsService {
if (client != null) {
String encodedPassword = UriUtils.encodeQueryParam(Strings.nullToEmpty(client.getClientSecret()), "UTF-8");
String encodedPassword = UriUtils.encodePathSegment(Strings.nullToEmpty(client.getClientSecret()), "UTF-8");
if (config.isHeartMode() || // if we're running HEART mode turn off all client secrets
(client.getTokenEndpointAuthMethod() != null &&