Repository: cxf
Updated Branches:
  refs/heads/master d333c275e -> 969cdb02e


Fixing a typo in OIDC token validator


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/969cdb02
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/969cdb02
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/969cdb02

Branch: refs/heads/master
Commit: 969cdb02ee1bffbf8e32c00caad9820f109230f4
Parents: d333c27
Author: Sergey Beryozkin <sberyoz...@talend.com>
Authored: Fri Nov 14 13:36:46 2014 +0000
Committer: Sergey Beryozkin <sberyoz...@talend.com>
Committed: Fri Nov 14 13:36:46 2014 +0000

----------------------------------------------------------------------
 .../org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cxf/blob/969cdb02/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
----------------------------------------------------------------------
diff --git 
a/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
 
b/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
index 1553258..89e7fa4 100644
--- 
a/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
+++ 
b/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
@@ -115,7 +115,7 @@ public abstract class AbstractTokenValidator {
         return validateToken(jwtConsumer, jwt, 
JwsUtils.getSignatureVerifier(key));
     }
     protected JwtToken validateToken(JwsJwtCompactConsumer consumer, JwtToken 
jwt, JwsSignatureVerifier jws) {
-        if (consumer.verifySignatureWith(jws)) {
+        if (!consumer.verifySignatureWith(jws)) {
             throw new SecurityException("Invalid Signature");
         }
         return jwt;

Reply via email to