From c90a76b2063eb99b944dbe15a1599e527626a4bd Mon Sep 17 00:00:00 2001 From: Neal Gompa Date: Jun 18 2020 11:43:27 +0000 Subject: providers/openidc: Do not stringify empty array for 'amr' when setting up auth response We transform the whole authentication response dictionary into JSON later on, so we do not need to do it while building the dictionary. Signed-off-by: Neal Gompa --- diff --git a/ipsilon/providers/openidc/auth.py b/ipsilon/providers/openidc/auth.py index 265890f..ada49ec 100644 --- a/ipsilon/providers/openidc/auth.py +++ b/ipsilon/providers/openidc/auth.py @@ -503,7 +503,7 @@ class Continue(AuthenticateRequest): if 'nonce' in request: id_token['nonce'] = request['nonce'] id_token['acr'] = '0' - id_token['amr'] = json.dumps([]) + id_token['amr'] = [] id_token['azp'] = request['client_id'] if 'code' in response: