Mer plunder med azure planb (#1190)

navikt · Sep 26, 2022 · 6c4684d · 6c4684d
1 parent d105474
commit 6c4684d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.../sikkerhet/src/main/java/no/nav/vedtak/isso/ressurs/AzureAuthorizationRequestBuilder.java b/.../sikkerhet/src/main/java/no/nav/vedtak/isso/ressurs/AzureAuthorizationRequestBuilder.java
@@ -33,7 +33,7 @@ public String buildRedirectString() {
         var redirectUrl = ServerInfo.instance().getCallbackUrl();
 
         return providerConfig.authorizationEndpoint().toString() +
-            "&response_type=code" +
+            "?response_type=code" +
             "&response_mode=query" +
             "&scope=" + URLEncoder.encode(scopes, StandardCharsets.UTF_8) +
             "&client_id=" + URLEncoder.encode(clientId, StandardCharsets.UTF_8) +

diff --git a/felles/sikkerhet/src/main/java/no/nav/vedtak/isso/ressurs/AzureConfigProperties.java b/felles/sikkerhet/src/main/java/no/nav/vedtak/isso/ressurs/AzureConfigProperties.java
@@ -9,8 +9,8 @@ public final class AzureConfigProperties {
     private static final Environment ENV = Environment.current();
 
     // En mellomrom-separert liste over scopes man ønsker inkludert i token - i starten brukes openid
-    // NB: dersom denne settes - så begynn med openid offline_access api://....
-    // Fx openid offline_access api://<cluster>.<namespace>.fplos/.default api://<cluster>.<namespace>.fpsak/.default
+    // NB: dersom denne settes - så begynn med openid offline_access api://.... - men kun for den som gjør redirect
+    // Fx openid offline_access api://<cluster>.<namespace>.fplos/.default
     private static final String AZURE_SCOPES_PROPERTY_NAME = "fp.trial.azure.scopes";
 
     // Sett = true for å aktivere