make the null assertion processor the default

Author: jricher

openid-connect-common/src/main/java/org/mitre/jwt/assertion/impl/NullAssertionValidator.java

@@ -22,14 +22,18 @@
 import com.nimbusds.jwt.JWT;
 
 /**
+ * Reject all assertions passed in.
+ * 
  * @author jricher
  *
  */
 public class NullAssertionValidator implements AssertionValidator {
 
+/**
+ * Reject all assertions passed in, always returns false.
+ */
 @Override
 public boolean isValid(JWT assertion) {
-// TODO Auto-generated method stub
 return false;
 
 }

openid-connect-server-webapp/src/main/webapp/WEB-INF/assertion-config.xml

@@ -31,13 +31,16 @@
 
 
 <!-- validate client software statements for dynamic registration -->
-<bean id="clientAssertionValidator" class="org.mitre.jwt.assertion.impl.WhitelistedIssuerAssertionValidator">
-<property name="whitelist">
-<map>
-<entry key="http://artemesia.local" value="http://localhost:8080/openid-connect-server-webapp/jwk" />
-</map>
-</property>
-</bean>
+<bean id="clientAssertionValidator" class="org.mitre.jwt.assertion.impl.NullAssertionValidator" />
+
+<!-- this class will pass assertions signed by the issuers and keys in the whitelist -->
+<!--	<bean id="clientAssertionValidator" class="org.mitre.jwt.assertion.impl.WhitelistedIssuerAssertionValidator"> -->
+<!--	<property name="whitelist"> -->
+<!--	<map> -->
+<!--	<entry key="http://artemesia.local" value="http://localhost:8080/openid-connect-server-webapp/jwk" /> -->
+<!--	</map> -->
+<!--	</property> -->
+<!--	</bean> -->
 
 
 </beans>