Add missing check on challenge code method for PKCE

during dynamic client registration
indigo-iam · Mar 9, 2023 · 5557dfa · 5557dfa
1 parent 6093ee1
commit 5557dfa
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/iam-login-service/src/main/java/it/infn/mw/iam/api/client/service/ClientConverter.java b/iam-login-service/src/main/java/it/infn/mw/iam/api/client/service/ClientConverter.java
@@ -226,6 +226,11 @@ public ClientDetailsEntity entityFromRegistrationRequest(RegisteredClientDTO dto
         .setTokenEndpointAuthMethod(AuthMethod.getByValue(dto.getTokenEndpointAuthMethod().name()));
     }
 
+    if (dto.getCodeChallengeMethod() != null) {
+      PKCEAlgorithm pkceAlgo = PKCEAlgorithm.parse(dto.getCodeChallengeMethod());
+      client.setCodeChallengeMethod(pkceAlgo);
+    }
+
     return client;
   }