OpenID-Connect-Java-Spring-.../openid-connect-server/src
HeXetic 7725fcfa2b createAuthorizationCode should be @Transactional
An Authentication should not exist without its matching AuthorizationCode, but typically an AuthorizationCode will have a foreign key on an Authentication, meaning it can't be saved first. This block should be wrapped in a transaction so that other DB clients (say, for example, clearExpiredAuthorizationCodes) don't see an inconsistent snapshot and then misbehave.
2016-12-02 16:29:48 -05:00
..
main/java/org/mitre createAuthorizationCode should be @Transactional 2016-12-02 16:29:48 -05:00
test/java/org/mitre Add new tests which asserts that `user_id` should not be present in the introspection response if there's no user authentication available 2016-12-02 16:08:32 -05:00