[CXF-6027] oauth2 client redirect uris are never valid

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.2
• Fix Version/s: 3.0.2, 3.1
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Ricky Nguyen
• Created: 26/Sep/14 07:30
• Updated: 16/Feb/15 16:09
• Resolved: 26/Sep/14 09:21

Description

Using the DefaultEncryptingOAuthDataProvider in 3.0.2-SNAPSHOT, I always get an error about invalid redirect uris, despite setting the correct redirect uri when registering the client and when making the authorize code grant request.

I stepped through the debugger and tracked it down to the tokenization of the client in ModelEncryptionSupport. The redirect uris and registered scopes are swapped when tokenizing/recreating the client object.