OAuth Profile endpoint releases ALL attributes regardless of service config
Description
The OAuth20ProfileController in CAS-OAuth attempts to want to serialize and marshal all principal attributes. The JSONFactory parser seems to have a problem with multi-valued attributes, which, in my exact case was "objectclass".
Exception trace:
Also noticed that the code attempts to want to marshal ALL principal attributes into JSON, rather than just what attributes may be allowed for the oauth client service.
Environment
None
Activity
Show:
Misagh MoayyedJuly 9, 2014 at 5:26 PM
Edited
I can no longer duplicate this issue in 4.1 Seems like JSON factory can in fact serialize the particular collection type. There is still an issue with attributes being put out, which I'd like to consider as room for improvement. Attributes should be taken out of service config, rather then releasing them all.
The OAuth20ProfileController in CAS-OAuth attempts to want to serialize and marshal all principal attributes. The JSONFactory parser seems to have a problem with multi-valued attributes, which, in my exact case was "objectclass".
Exception trace:
Also noticed that the code attempts to want to marshal ALL principal attributes into JSON, rather than just what attributes may be allowed for the oauth client service.