keycloak-uncached

KEYCLOAK-4568 Identity broker service may fail to validate

3/11/2017 5:59:25 PM

Details

diff --git a/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java b/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
index c950ebe..bf3bc9f 100755
--- a/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
+++ b/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
@@ -257,8 +257,8 @@ public class IdentityBrokerService implements IdentityProvider.AuthenticationCal
                 byte[] check = md.digest(input.getBytes(StandardCharsets.UTF_8));
                 if (MessageDigest.isEqual(decoded, check)) {
                     clientSession = cs;
+                    break;
                 }
-                break;
             }
         }
         if (clientSession == null) {