From 095f55d742faef224d9779abbc75573bc3e7b1a0 Mon Sep 17 00:00:00 2001 From: Sungho Park Date: Wed, 7 Oct 2020 19:46:58 +0900 Subject: [PATCH] Update TokenActivity.java In the case of private SSL, it has been improved to ignore the part where user information cannot be obtained because the SSL verification cannot be ignored. --- app/java/net/openid/appauthdemo/TokenActivity.java | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/app/java/net/openid/appauthdemo/TokenActivity.java b/app/java/net/openid/appauthdemo/TokenActivity.java index 10e681f7..ce06e2ae 100644 --- a/app/java/net/openid/appauthdemo/TokenActivity.java +++ b/app/java/net/openid/appauthdemo/TokenActivity.java @@ -361,8 +361,9 @@ private void fetchUserInfo(String accessToken, String idToken, AuthorizationExce mExecutor.submit(() -> { try { - HttpURLConnection conn = - (HttpURLConnection) userInfoEndpoint.openConnection(); + Configuration config = Configuration.getInstance(this); + Uri uri = Uri.parse(userInfoEndpoint.toString()); + HttpURLConnection conn = config.getConnectionBuilder().openConnection(uri); conn.setRequestProperty("Authorization", "Bearer " + accessToken); conn.setInstanceFollowRedirects(false); String response = Okio.buffer(Okio.source(conn.getInputStream()))