1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
--- src/iddawc.c.orig 2022-12-17 21:23:54 UTC
+++ src/iddawc.c
@@ -4972,7 +4972,7 @@ int i_verify_id_token(struct _i_session * i_session) {
if (alg != GNUTLS_DIG_UNKNOWN) {
hash_data.data = (unsigned char*)i_session->access_token;
hash_data.size = (unsigned int)o_strlen(i_session->access_token);
- if (gnutls_fingerprint(alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
+ if (gnutls_fingerprint((gnutls_digest_algorithm_t) alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
if (o_base64url_encode(hash, hash_len/2, hash_encoded, &hash_encoded_len)) {
if (o_strncmp((const char *)hash_encoded, json_string_value(json_object_get(i_session->id_token_payload, "at_hash")), hash_encoded_len) != 0) {
y_log_message(Y_LOG_LEVEL_DEBUG, "i_verify_id_token at - at_hash invalid");
@@ -5000,7 +5000,7 @@ int i_verify_id_token(struct _i_session * i_session) {
if (alg != GNUTLS_DIG_UNKNOWN) {
hash_data.data = (unsigned char*)i_session->code;
hash_data.size = (unsigned int)o_strlen(i_session->code);
- if (gnutls_fingerprint(alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
+ if (gnutls_fingerprint((gnutls_digest_algorithm_t) alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
if (o_base64url_encode(hash, hash_len/2, hash_encoded, &hash_encoded_len)) {
if (o_strncmp((const char *)hash_encoded, json_string_value(json_object_get(i_session->id_token_payload, "c_hash")), hash_encoded_len) != 0) {
y_log_message(Y_LOG_LEVEL_DEBUG, "i_verify_id_token - c_hash invalid");
@@ -5028,7 +5028,7 @@ int i_verify_id_token(struct _i_session * i_session) {
if (alg != GNUTLS_DIG_UNKNOWN) {
hash_data.data = (unsigned char*)i_session->state;
hash_data.size = (unsigned int)o_strlen(i_session->state);
- if (gnutls_fingerprint(alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
+ if (gnutls_fingerprint((gnutls_digest_algorithm_t) alg, &hash_data, hash, &hash_len) == GNUTLS_E_SUCCESS) {
if (o_base64url_encode(hash, hash_len/2, hash_encoded, &hash_encoded_len)) {
if (o_strncmp((const char *)hash_encoded, json_string_value(json_object_get(i_session->id_token_payload, "s_hash")), hash_encoded_len) != 0) {
y_log_message(Y_LOG_LEVEL_DEBUG, "i_verify_id_token - s_hash invalid");
|
