[OLTU-198] Multiple parameter styles result in exception

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: oauth2-resourceserver
• Labels: review
• Assignee: Unassigned
• Reporter: Peter Nehrer
• Created: 03/May/16 18:55
• Updated: 25/Oct/17 13:10

Description

When multiple parameter styles are used with OAuthAccessResourceRequest, an exception is thrown in validate() method (called from constructor). E.g.,

new OAuthAccessResourceRequest(req, ParameterStyle.HEADER, ParameterStyle.QUERY, ParameterStyle.BODY);

When validating request against each parameter style, the exception should only be thrown when no style successfully validated. E.g., in the above scenario, passing "Authorization: Bearer foo" still results in exception because there's no query string param and content type is wrong (which doesn't matter because we have the token in header).