Hi Hasini,

Merged the PR with [1]

Thanks
Isura.


[1]
https://github.com/wso2-extensions/identity-inbound-auth-oauth/commit/6adda2141e27cbe2df1a985e8f857816f37f2a66

On Fri, Jul 28, 2017 at 5:01 PM, Hasini Witharana <[email protected]> wrote:

> Hi,
>
> I am working on the jira IDENTITY-6155
> <https://wso2.org/jira/browse/IDENTITY-6155>. When Invoking the user info
> endpoint without adding the access token to the 'Bearer' header causes the
> server to return an ArrayIndexOutOfBoundsException with the full stacktrace
> to the client.
>
> As per the OIDC/oauth2.0 specifications[1][2], this sort of a request can
> be treated as an invalid request.
> Please refer the PR[3] which fixes this issue.
>
> [1]- http://openid.net/specs/openid-connect-core-1_0.html#UserInfoError
> [2]- https://tools.ietf.org/html/rfc6750#section-6.2
> [3]- https://github.com/wso2-extensions/identity-inbound-auth-
> oauth/pull/420
>
> Thank you.
>
> --
>
> *Hasini Witharana*
> Software Engineering Intern | WSO2
>
>
> *Email : [email protected] <[email protected]>*
>
> *Mobile : +94713850143 <+94%2071%20385%200143>[image:
> http://wso2.com/signature] <http://wso2.com/signature>*
>



-- 

*Isura Dilhara Karunaratne*
Senior Software Engineer | WSO2
Email: [email protected]
Mob : +94 772 254 810
Blog : http://isurad.blogspot.com/
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to