libre.sh/keycloak-scim
2
0
Fork 0
Code Issues 14 Pull requests Releases Packages Activity Actions 6

remove restriction

Browse source
This commit is contained in:
Bill Burke 2017-07-28 16:25:32 -04:00
parent 02f043d9a6
commit 486a0c9528
1 changed files with 0 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
services/src/main/java/org/keycloak/protocol/oidc/endpoints/TokenEndpoint.java
View file

@ -572,13 +572,6 @@ public class TokenEndpoint {
throw new ErrorResponseException(OAuthErrorException.INVALID_TOKEN, "Invalid token", Response.Status.BAD_REQUEST); throw new ErrorResponseException(OAuthErrorException.INVALID_TOKEN, "Invalid token", Response.Status.BAD_REQUEST);
} }
if (authResult.getToken().getAudience() == null || authResult.getToken().getAudience().length > 1
|| !client.getClientId().equals(authResult.getToken().getAudience()[0]) ) {
event.error(Errors.INVALID_TOKEN);
throw new ErrorResponseException(OAuthErrorException.INVALID_TOKEN, "Cannot exchange token from different client", Response.Status.BAD_REQUEST);
}
String audience = formParams.getFirst(OAuth2Constants.AUDIENCE); String audience = formParams.getFirst(OAuth2Constants.AUDIENCE);
if (audience == null) { if (audience == null) {
event.error(Errors.INVALID_REQUEST); event.error(Errors.INVALID_REQUEST);