diff --git a/auth0/src/main/java/com/auth0/android/provider/IdTokenVerifier.kt b/auth0/src/main/java/com/auth0/android/provider/IdTokenVerifier.kt index 1c861d4c..cd260bf0 100644 --- a/auth0/src/main/java/com/auth0/android/provider/IdTokenVerifier.kt +++ b/auth0/src/main/java/com/auth0/android/provider/IdTokenVerifier.kt @@ -73,7 +73,7 @@ internal class IdTokenVerifier { if (TextUtils.isEmpty(orgNameClaim)) { throw OrgNameClaimMissingException() } - if (!organizationInput.equals(orgNameClaim, true)) { + if (organizationInput.lowercase() != orgNameClaim) { throw OrgNameClaimMismatchException(organizationInput, orgNameClaim) } } diff --git a/auth0/src/test/java/com/auth0/android/provider/IdTokenVerifierTest.java b/auth0/src/test/java/com/auth0/android/provider/IdTokenVerifierTest.java index a8fc6a7f..27bf6b5d 100644 --- a/auth0/src/test/java/com/auth0/android/provider/IdTokenVerifierTest.java +++ b/auth0/src/test/java/com/auth0/android/provider/IdTokenVerifierTest.java @@ -305,7 +305,7 @@ public void shouldNotFailWhenOrganizationNameClaimIsRequiredAndHasSameValue() th } @Test - public void shouldNotFailWhenOrganizationNameClaimIsRequiredAndHasSameValueInDifferentCase() throws Exception { + public void shouldFailWhenInputClaimHasDifferentCaseThanOrgNameReceived() throws Exception { Map jwtBody = createJWTBody(); jwtBody.put("org_name", "__tESt_OrG_nAme__"); String token = createTestJWT("none", jwtBody); @@ -314,6 +314,16 @@ public void shouldNotFailWhenOrganizationNameClaimIsRequiredAndHasSameValueInDif idTokenVerifier.verify(jwt, options, true); } + @Test + public void shouldNotFailWhenOrgNameInputHasDifferentCaseThanClaimReceived() throws Exception { + Map jwtBody = createJWTBody(); + jwtBody.put("org_name", EXPECTED_ORGANIZATION_NAME); + String token = createTestJWT("none", jwtBody); + Jwt jwt = new Jwt(token); + options.setOrganization("__tESt_OrG_nAme__"); + idTokenVerifier.verify(jwt, options, true); + } + @Test public void shouldNotFailWhenOrganizationIdClaimIsMissingButNotRequired() throws Exception { Map jwtBody = createJWTBody("org_id");