commit db457bcb5a643014113966b1a0a47b70f8df48e6
author margaretha <margaretha@ids-mannheim.de> Thu Nov 21 14:38:56 2019 +0100
committer margaretha <margaretha@ids-mannheim.de> Thu Nov 21 14:39:43 2019 +0100
tree d92769353b5084acb885b124328beb1987f2753e
parent 43aceb59c7e797ff07cc498ad4e2a665396fe80c

Added username filtering to token revocation service via super client

Change-Id: I6ae4ace9ff464b8bcd13fbd0705061bd833726b7

full/src/main/java/de/ids_mannheim/korap/oauth2/oltu/service/OltuTokenService.java

diff --git a/full/src/main/java/de/ids_mannheim/korap/oauth2/oltu/service/OltuTokenService.java b/full/src/main/java/de/ids_mannheim/korap/oauth2/oltu/service/OltuTokenService.java
index feafc87..ebc7252 100644
--- a/full/src/main/java/de/ids_mannheim/korap/oauth2/oltu/service/OltuTokenService.java
+++ b/full/src/main/java/de/ids_mannheim/korap/oauth2/oltu/service/OltuTokenService.java
@@ -424,7 +424,7 @@
         }
     }
 
-    public void revokeTokenViaSuperClient (
+    public void revokeTokenViaSuperClient (String username,
             OAuth2RevokeTokenSuperRequest revokeTokenRequest)
             throws KustvaktException {
         String superClientId = revokeTokenRequest.getSuperClientId();
@@ -442,7 +442,9 @@
                 tokenDao.retrieveRefreshTokenByClientId(clientId);
 
         for (RefreshToken r : refreshTokens) {
-            revokeRefreshToken(r);
+            if (r.getUserId().equals(username)){
+                revokeRefreshToken(r);
+            }
         }
     }