From ed7ff435ba6a1ca79cad0caf2c6624228ebd5a7a Mon Sep 17 00:00:00 2001 From: Amanda Anganes Date: Mon, 19 Aug 2013 16:55:29 -0400 Subject: [PATCH] Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value. --- .../org/mitre/openid/connect/token/ConnectTokenEnhancer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java b/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java index 56408acc1..6fd5c27cc 100644 --- a/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java +++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java @@ -86,7 +86,7 @@ public class ConnectTokenEnhancer implements TokenEnhancer { JWSAlgorithm signingAlg; JWSAlgorithm clientAlg = client.getIdTokenSignedResponseAlg().getAlgorithm(); - if (clientAlg != JWSAlgorithm.NONE) { + if (clientAlg != null) { signingAlg = clientAlg; } else { signingAlg = jwtService.getDefaultSigningAlgorithm();