aboutsummaryrefslogtreecommitdiff
path: root/src/identity-provider
diff options
context:
space:
mode:
authorSchanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de>2017-12-14 17:47:16 +0100
committerSchanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de>2017-12-14 17:47:16 +0100
commitc781756495ea853f3c9f78d7dad7002d0bdc4180 (patch)
tree911455353f6450445a2621c9b5c7b39b315e2192 /src/identity-provider
parent5cefcd299ee56a92285569b1d96fb553a6582255 (diff)
downloadgnunet-c781756495ea853f3c9f78d7dad7002d0bdc4180.tar.gz
gnunet-c781756495ea853f3c9f78d7dad7002d0bdc4180.zip
-minor
Diffstat (limited to 'src/identity-provider')
-rw-r--r--src/identity-provider/plugin_rest_identity_provider.c19
1 files changed, 15 insertions, 4 deletions
diff --git a/src/identity-provider/plugin_rest_identity_provider.c b/src/identity-provider/plugin_rest_identity_provider.c
index 1ad0aef42..4a03221a0 100644
--- a/src/identity-provider/plugin_rest_identity_provider.c
+++ b/src/identity-provider/plugin_rest_identity_provider.c
@@ -142,8 +142,14 @@
142 */ 142 */
143char* OIDC_ignored_parameter_array [] = 143char* OIDC_ignored_parameter_array [] =
144{ 144{
145 "display", "prompt", "max_age", "ui_locales", "response_mode", 145 "display",
146 "id_token_hint", "login_hint", "acr_values" 146 "prompt",
147 "max_age",
148 "ui_locales",
149 "response_mode",
150 "id_token_hint",
151 "login_hint",
152 "acr_values"
147}; 153};
148 154
149/** 155/**
@@ -1080,7 +1086,12 @@ authorize_cont (struct GNUNET_REST_RequestHandle *con_handle,
1080{ 1086{
1081 struct MHD_Response *resp; 1087 struct MHD_Response *resp;
1082 struct RequestHandle *handle = cls; 1088 struct RequestHandle *handle = cls;
1083 char *response_type, *client_id, *scope, *redirect_uri, *state, *nonce; 1089 char *response_type;
1090 char *client_id;
1091 char *scope;
1092 char *redirect_uri;
1093 char *state;
1094 char *nonce;
1084 1095
1085 //TODO clean up method 1096 //TODO clean up method
1086 1097
@@ -1132,7 +1143,7 @@ authorize_cont (struct GNUNET_REST_RequestHandle *con_handle,
1132 client_id = GNUNET_CONTAINER_multihashmap_get(handle->rest_handle->url_param_map, 1143 client_id = GNUNET_CONTAINER_multihashmap_get(handle->rest_handle->url_param_map,
1133 &cache_key); 1144 &cache_key);
1134 1145
1135 1146 //TODO verify if client_id is in delegation from selected identity, i.e. use GNUNET_NAMESTORE_zone_to_name() to verify
1136 GNUNET_CRYPTO_hash (OIDC_SCOPE_KEY, strlen (OIDC_SCOPE_KEY), &cache_key); 1147 GNUNET_CRYPTO_hash (OIDC_SCOPE_KEY, strlen (OIDC_SCOPE_KEY), &cache_key);
1137 if (GNUNET_NO == GNUNET_CONTAINER_multihashmap_contains (handle->rest_handle->url_param_map, 1148 if (GNUNET_NO == GNUNET_CONTAINER_multihashmap_contains (handle->rest_handle->url_param_map,
1138 &cache_key)) 1149 &cache_key))