Skip to content

Commit 4063f7f

Browse files
committed
user info endpoint response uses correct client algorithms, addresses mitreid-connect#921
1 parent 3c222b0 commit 4063f7f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

openid-connect-server/src/main/java/org/mitre/openid/connect/view/UserInfoJWTView.java

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -109,8 +109,8 @@ protected void writeOut(JsonObject json, Map<String, Object> model,
109109
claims.setJWTID(UUID.randomUUID().toString()); // set a random NONCE in the middle of it
110110

111111

112-
if (client.getIdTokenEncryptedResponseAlg() != null && !client.getIdTokenEncryptedResponseAlg().equals(Algorithm.NONE)
113-
&& client.getIdTokenEncryptedResponseEnc() != null && !client.getIdTokenEncryptedResponseEnc().equals(Algorithm.NONE)
112+
if (client.getUserInfoEncryptedResponseAlg() != null && !client.getUserInfoEncryptedResponseAlg().equals(Algorithm.NONE)
113+
&& client.getUserInfoEncryptedResponseEnc() != null && !client.getUserInfoEncryptedResponseEnc().equals(Algorithm.NONE)
114114
&& (!Strings.isNullOrEmpty(client.getJwksUri()) || client.getJwks() != null)) {
115115

116116
// encrypt it to the client's key
@@ -119,7 +119,7 @@ protected void writeOut(JsonObject json, Map<String, Object> model,
119119

120120
if (encrypter != null) {
121121

122-
EncryptedJWT encrypted = new EncryptedJWT(new JWEHeader(client.getIdTokenEncryptedResponseAlg(), client.getIdTokenEncryptedResponseEnc()), claims);
122+
EncryptedJWT encrypted = new EncryptedJWT(new JWEHeader(client.getUserInfoEncryptedResponseAlg(), client.getUserInfoEncryptedResponseEnc()), claims);
123123

124124
encrypter.encryptJwt(encrypted);
125125

0 commit comments

Comments
 (0)