[java-idp-oidc] 02/04: Allow null value for consented claims in the claims set.

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=fbde5aaff5251214951833d7afdf98a26f355a6c

commit fbde5aaff5251214951833d7afdf98a26f355a6c
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri May 17 12:01:23 2024 +0300

    Allow null value for consented claims in the claims set.
    
    Unlike Nimbus v10, v11 doesn't drop the null values from the claims set. This way
    we ignore null values for consented claims: previously the value was required to be
    an instance of List if the claim existed in the set.
---
 .../net/shibboleth/idp/plugin/oidc/op/token/support/TokenClaimsSet.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-oidc-extension-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/token/support/TokenClaimsSet.java b/idp-oidc-extension-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/token/support/TokenClaimsSet.java
index c6ca4c5f..0912f0f4 100644
--- a/idp-oidc-extension-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/token/support/TokenClaimsSet.java
+++ b/idp-oidc-extension-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/token/support/TokenClaimsSet.java
@@ -208,7 +208,7 @@ public class TokenClaimsSet {
         if (tokenClaimsSet.getClaims().containsKey(KEY_ACR)) {
             tokenClaimsSet.getStringClaim(KEY_ACR);
         }
-        if (tokenClaimsSet.getClaims().containsKey(KEY_CONSENTED_CLAIMS)
+        if (tokenClaimsSet.getClaims().get(KEY_CONSENTED_CLAIMS) != null
                 && !(tokenClaimsSet.getClaim(KEY_CONSENTED_CLAIMS) instanceof List)) {
             throw new ParseException("consented claims is of wrong type", 0);
         }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.