Repository: cxf
Updated Branches:
  refs/heads/3.0.x-fixes a7ced3dee -> da75a0f83


Fixing a typo in OIDC token validator


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/da75a0f8
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/da75a0f8
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/da75a0f8

Branch: refs/heads/3.0.x-fixes
Commit: da75a0f83e92dc46d0aa6fcb091cec5492ea48e4
Parents: a7ced3d
Author: Sergey Beryozkin <sberyoz...@talend.com>
Authored: Fri Nov 14 13:36:46 2014 +0000
Committer: Sergey Beryozkin <sberyoz...@talend.com>
Committed: Fri Nov 14 13:38:05 2014 +0000

----------------------------------------------------------------------
 .../org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cxf/blob/da75a0f8/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
----------------------------------------------------------------------
diff --git 
a/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
 
b/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
index 1553258..89e7fa4 100644
--- 
a/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
+++ 
b/rt/rs/security/sso/oidc/src/main/java/org/apache/cxf/rs/security/oidc/rp/AbstractTokenValidator.java
@@ -115,7 +115,7 @@ public abstract class AbstractTokenValidator {
         return validateToken(jwtConsumer, jwt, 
JwsUtils.getSignatureVerifier(key));
     }
     protected JwtToken validateToken(JwsJwtCompactConsumer consumer, JwtToken 
jwt, JwsSignatureVerifier jws) {
-        if (consumer.verifySignatureWith(jws)) {
+        if (!consumer.verifySignatureWith(jws)) {
             throw new SecurityException("Invalid Signature");
         }
         return jwt;

Reply via email to