Skip to content

Commit 61433cc

Browse files
committed
deepen webfinger, endpoint is looser
closes mitreid-connect#1008
1 parent 193d3f8 commit 61433cc

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -101,10 +101,13 @@ public String apply(Algorithm alg) {
101101
}
102102
};
103103

104-
@RequestMapping(value={"/" + WEBFINGER_URL},
105-
params={"resource", "rel=http://openid.net/specs/connect/1.0/issuer"}, produces = MediaType.APPLICATION_JSON_VALUE)
106-
public String webfinger(@RequestParam("resource") String resource, Model model) {
104+
@RequestMapping(value={"/" + WEBFINGER_URL}, produces = MediaType.APPLICATION_JSON_VALUE)
105+
public String webfinger(@RequestParam("resource") String resource, @RequestParam(value = "rel", required = false) String rel, Model model) {
107106

107+
if (!Strings.isNullOrEmpty(rel) && !rel.equals("https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues")) {
108+
logger.warn("Responding to webfinger request for non-OIDC relation: " + rel);
109+
}
110+
108111
if (!resource.equals(config.getIssuer())) {
109112
// it's not the issuer directly, need to check other methods
110113

0 commit comments

Comments
 (0)