You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2016/08/13 21:30:54 UTC
[16/33] cxf git commit: [CXF-6692] Comment updates
[CXF-6692] Comment updates
Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/833386f0
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/833386f0
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/833386f0
Branch: refs/heads/master-jaxrs-2.1
Commit: 833386f005cd0b7682ef83894fda0b3a5179b130
Parents: c5b8e98
Author: Sergey Beryozkin <sb...@gmail.com>
Authored: Thu Aug 11 13:11:01 2016 +0100
Committer: Sergey Beryozkin <sb...@gmail.com>
Committed: Thu Aug 11 13:11:01 2016 +0100
----------------------------------------------------------------------
.../oauth2/provider/AbstractOAuthDataProvider.java | 12 +-----------
1 file changed, 1 insertion(+), 11 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cxf/blob/833386f0/rt/rs/security/oauth-parent/oauth2/src/main/java/org/apache/cxf/rs/security/oauth2/provider/AbstractOAuthDataProvider.java
----------------------------------------------------------------------
diff --git a/rt/rs/security/oauth-parent/oauth2/src/main/java/org/apache/cxf/rs/security/oauth2/provider/AbstractOAuthDataProvider.java b/rt/rs/security/oauth-parent/oauth2/src/main/java/org/apache/cxf/rs/security/oauth2/provider/AbstractOAuthDataProvider.java
index 475a82d..dbbb167 100644
--- a/rt/rs/security/oauth-parent/oauth2/src/main/java/org/apache/cxf/rs/security/oauth2/provider/AbstractOAuthDataProvider.java
+++ b/rt/rs/security/oauth-parent/oauth2/src/main/java/org/apache/cxf/rs/security/oauth2/provider/AbstractOAuthDataProvider.java
@@ -140,17 +140,7 @@ public abstract class AbstractOAuthDataProvider implements OAuthDataProvider, Cl
}
// ServerAccessToken 'nonce' property, if available, can be ignored for the purpose for persisting it
// further as a JWT claim - as it is only used once by (OIDC) IdTokenResponseFilter
- // to set IdToken nonce property with the filter havinh an access to the current ServerAccessToken instance
-
- //TODO: consider auto-setting all the remaining token properties as claims either optionally
- // or if JWE encryption is enabled for the providers be able to choose if they
- // want to save JOSE token representations only - though the providers can always override
- // this method too and set the extra claims. If all ServerAccessToken properties are set as claims
- // then the providers will only have to save ServerAccessToken.getTokenKey() in
- // saveAccessToken(ServerAccessToken) which will be a JOSE representation of a given ServerAccessToken
- // instance but will have to restore ServerAccessToken from it when the runtime requests ServerAccessToken
- // for the validation purposes.
-
+ // to set IdToken nonce property with the filter having an access to the current ServerAccessToken instance
return claims;
}