Skip to content

Commit 0f09842

Browse files
author
muha
committed
HelseId client_assertion requirment
1 parent ce9a7d5 commit 0f09842

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

common/src/main/java/com/example/service/JwtClientAssertionParametersService.java

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -97,15 +97,18 @@ public MultiValueMap<String, String> buildClientAssertionParameters(
9797
throw new OAuth2AuthorizationException(oauth2Error);
9898
}
9999

100-
JwsHeader.Builder headersBuilder = JwsHeader.with(jwsAlgorithm);
100+
JwsHeader.Builder headersBuilder = JwsHeader.with(jwsAlgorithm)
101+
.header("typ", "client-authentication+jwt");
101102

102103
Instant issuedAt = Instant.now();
103104
Instant expiresAt = issuedAt.plus(Duration.ofSeconds(45));
104105

105106
JwtClaimsSet.Builder claimsBuilder = JwtClaimsSet.builder()
106107
.issuer(clientRegistration.getClientId())
107108
.subject(clientRegistration.getClientId())
108-
.audience(Collections.singletonList(clientRegistration.getProviderDetails().getIssuerUri()))
109+
.audience(Collections.singletonList(
110+
clientRegistration.getProviderDetails().getConfigurationMetadata().get("issuer")
111+
.toString()))
109112
.id(UUID.randomUUID().toString())
110113
.issuedAt(issuedAt)
111114
.notBefore(issuedAt)

0 commit comments

Comments
 (0)