[java-idp-oidc] 01/02: JOIDC-128 - Support OAuth authorization requests

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=828fc3e988258ea9403db213d6635e95bc05c987

commit 828fc3e988258ea9403db213d6635e95bc05c987
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Oct 7 08:57:23 2022 +0300

    JOIDC-128 - Support OAuth authorization requests
    
    https://shibboleth.atlassian.net/browse/JOIDC-128
    
    Handle empty requested audience list in the same way as null: the previous if-clause
    may have set it to empty if previouslyGrantedAudience was empty.
---
 .../idp/plugin/oidc/op/oauth2/profile/impl/ValidateAudience.java        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/ValidateAudience.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/ValidateAudience.java
index 64f2505f..193f02fc 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/ValidateAudience.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/ValidateAudience.java
@@ -208,7 +208,7 @@ public class ValidateAudience extends AbstractOIDCAuthenticationResponseAction {
             previouslyGrantedAudience = null;
         }
         
-        if (requestedAudience == null) {
+        if (requestedAudience == null || requestedAudience.isEmpty()) {
             // Nothing requested or previously granted.
             if (allowNone) {
                 log.debug("{} No audience in request for client {}, OP will be sole audience", getLogPrefix(),

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.