fix: added provider_id in pairwise func

italia · May 7, 2022 · de9ba44 · de9ba44
1 parent 93b6e39
commit de9ba44
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/spid_cie_oidc/__init__.py b/spid_cie_oidc/__init__.py
@@ -1 +1 @@
-__version__ = "0.7.0"
+__version__ = "0.7.1"
diff --git a/spid_cie_oidc/provider/models.py b/spid_cie_oidc/provider/models.py
@@ -55,9 +55,9 @@ def revoke(self, destroy_session=True):
         iss_tokens.update(revoked=True)
         self.save()
 
-    def pairwised_sub(self):
+    def pairwised_sub(self, provider_id:str):
         return hashlib.sha256(
-            f"{self.user_uid}{self.client_id}{OIDCFED_PROVIDER_SALT}".encode()
+            f"{self.user_uid}{self.client_id}{provider_id}{OIDCFED_PROVIDER_SALT}".encode()
         ).hexdigest()
 
     def public_sub(self):

diff --git a/spid_cie_oidc/provider/views/__init__.py b/spid_cie_oidc/provider/views/__init__.py
@@ -282,7 +282,7 @@ def get_refresh_token(
             return refresh_token
 
     def get_iss_token_data(self, session : OidcSession, issuer: FederationEntityConfiguration):
-        _sub = session.pairwised_sub()
+        _sub = session.pairwised_sub(provider_id = issuer.sub)
         iss_sub = issuer.sub
         commons = self.get_jwt_common_data()
         jwk = issuer.jwks_core[0]