From af7c1f7d45f405a63d06e8ba1b636d78befa77ba Mon Sep 17 00:00:00 2001 From: Justin Richer Date: Wed, 27 Jul 2016 20:31:27 -0400 Subject: [PATCH] added PKCE support to discovery endpoint --- .../main/java/org/mitre/discovery/web/DiscoveryEndpoint.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java b/openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java index 0c10d54df..d89ba20e9 100644 --- a/openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java +++ b/openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java @@ -24,6 +24,7 @@ import java.util.Map; import org.mitre.discovery.util.WebfingerURLNormalizer; import org.mitre.jwt.encryption.service.JWTEncryptionAndDecryptionService; import org.mitre.jwt.signer.service.JWTSigningAndValidationService; +import org.mitre.oauth2.model.PKCEAlgorithm; import org.mitre.oauth2.service.SystemScopeService; import org.mitre.oauth2.web.IntrospectionEndpoint; import org.mitre.oauth2.web.RevocationEndpoint; @@ -364,6 +365,9 @@ public class DiscoveryEndpoint { m.put("introspection_endpoint", baseUrl + IntrospectionEndpoint.URL); // token introspection endpoint for verifying tokens m.put("revocation_endpoint", baseUrl + RevocationEndpoint.URL); // token revocation endpoint + m.put("code_challenge_methods_supported", Lists.newArrayList(PKCEAlgorithm.plain.getName(), PKCEAlgorithm.S256.getName())); + + model.addAttribute(JsonEntityView.ENTITY, m); return JsonEntityView.VIEWNAME;