Only strlower the scope

The hash is already guaranteed to be lowercase
simplesamlphp · Apr 5, 2022 · 1423cf5 · 1423cf5
1 parent 4c7d7e4
commit 1423cf5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Auth/Process/PairwiseID.php b/lib/Auth/Process/PairwiseID.php
@@ -89,7 +89,7 @@ public function process(array &$state): void
         $salt = $this->configUtils->getSecretSalt();
         $hash = hash('sha256', $salt . '|' . $userID . '|' . $sp_entityid, false);
 
-        $value = strtolower($hash . '@' . $scope);
+        $value = $hash . '@' . strtolower($scope);
         $this->validateGeneratedIdentifier($value);
 
         $state['Attributes'][Constants::ATTR_PAIRWISE_ID] = [$value];