[CXF-7115] Issuer in TokenIntrospection should be quoted in JSON

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 3.1.8
• Fix Version/s: 3.1.9, 3.2.0
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Svein Otto Solem
• Created: 31/Oct/16 08:31
• Updated: 22/Mar/17 17:25
• Resolved: 31/Oct/16 16:58

Description

See line 118 in OauthJSONProvider :
appendJsonPair(sb, "iss", obj.getIss(), false);

it should be
appendJsonPair(sb, "iss", obj.getIss(), true );

in my opinion since the issuer typically is a uri.