Move CodeQL exclusion to the correct line (#4744)

AzureAD · May 6, 2024 · e886c7a · e886c7a
1 parent aa06e26
commit e886c7a
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/...icrosoft.Identity.Test.Integration.netcore/HeadlessTests/ClientCredentialsTests.NetFwk.cs b/...icrosoft.Identity.Test.Integration.netcore/HeadlessTests/ClientCredentialsTests.NetFwk.cs
@@ -475,11 +475,12 @@ private string GetExpectedCacheKey(string clientId, string tenantId)
             string token = Base64UrlHelpers.Encode(headerBytes) + "." + Base64UrlHelpers.Encode(claimsBytes);
 
             //codeql [SM03799] Backwards Compatibility: Requires accepting PKCS1 for supporting ADFS 
-            string signature = Base64UrlHelpers.Encode(
-                rsa.SignData(
+            byte[] signatureBytes = rsa.SignData(
                     Encoding.UTF8.GetBytes(token),
                     HashAlgorithmName.SHA256,
-                    useSha2AndPss ? RSASignaturePadding.Pss : RSASignaturePadding.Pkcs1));
+                    useSha2AndPss ? RSASignaturePadding.Pss : RSASignaturePadding.Pkcs1);
+            string signature = Base64UrlHelpers.Encode(signatureBytes);
+
             return string.Concat(token, ".", signature);
         }
     }