Merge pull request #394 from eva-mueller-coremedia/patch-1

Compare username based on ID strategy on token refresh

src/main/java/org/jenkinsci/plugins/oic/OicSecurityRealm.java

@@ -1546,7 +1546,7 @@ private boolean handleTokenRefreshResponse(
 
         String username = determineStringField(userNameFieldExpr, parsedIdToken, userInfo);
 
-        if (!expectedUsername.equals(username)) {
+        if (!User.idStrategy().equals(expectedUsername, username)) {
             httpResponse.sendError(
                     HttpServletResponse.SC_UNAUTHORIZED, "User name was not the same after refresh request");
             return false;