apereo / cas / 7991

36%

push

travis-ci

OIDC protocol implementation fix (#3074)

* fix oidc at_hash generation implementation

fix the oidc at_hash generation implementation by replacing Base64 encoding by Base64 Url encoding

* fix oidc id_token kid attribute generation implementation

The kid (key ID) attribute of the JWT id_token sould not be random generated if not present in the JWKS because this attribute is not mandatory (https://tools.ietf.org/html/rfc7517#page-8) and, more important, prevent a successful validation of the id_token in the Client application

2 of 2 new or added lines in 2 files covered. (100.0%)

14381 of 31472 relevant lines covered (45.69%)

0.46 hits per line