Second OIDC authorization request error

[barramandi]

OpenAM version 14.1.8 (OpenAM 14.1.8 Build 900d631 )

Using the openid demo sample from https://github.com/ForgeRock/openid

Setup OIDC provider and OIDC client as per the requirement of the demo.
Start Implicit, login as user, user prompted for consent, and OIDC flow successful for first time.

Redo the Implicit flow again with same browser session, OpenAM will return error to the authorization request

{
"error_description": "Error running OIDC claims script: java.util.concurrent.ExecutionException: javax.script.ScriptException: javax.script.ScriptException: java.lang.SecurityException: Access to Java class "java.util.LinkedHashMap$LinkedKeyIterator" is prohibited.",
"state": "af0ifjsldkj",
"error": "not_found"
}

The issue is not present if user logged out before redoing the OIDC login flow

[vharseko]

#86

[vharseko]

Configuaration->Scripting-> for all instancess add in Engine Configuration "Java class whitelist" java.util.LinkedHashMap$LinkedKeyIterator

[vharseko]

https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/14.1.9