OpenID-Connect-Java-Spring-.../openid-connect-server
Sofia Ang b2fab9642e Fix such that `user_id` is only added if user authentication is available
OAuth2Authentication#getPrincipal() used by OAuth2Authentication#getName() defaults to the client id if user authentication is not available.
Prior to this fix, an introspection of a client-only access token would result to the user_id also being the client_id. This causes problems when this
introspection result is converted into an OAuth2Authentication by a resource server's IntrospectingTokenService -- the user_id is populated with
the client_id and so OAuth2Authentication's userAuthentication is populated falsely.
2016-12-02 16:08:32 -05:00
..
src Fix such that `user_id` is only added if user authentication is available 2016-12-02 16:08:32 -05:00
.gitignore Merge commit '023dd440d4a0e6e59a14c88013837d79a77c74e0' into 1.1-merge 2013-07-29 16:21:20 -04:00
pom.xml manage dependency versions in parent 2016-07-07 16:46:38 -04:00