public static boolean isAuthorizedResponseTypeForService ( final J2EContext context , final OAuthRegisteredService registeredService ) { val responseType = context . getRequestParameter ( OAuth20Constants . RESPONSE_TYPE ) ; if ( registeredService . getSupportedResponseTypes ( ) != null && ! registeredService . getSupportedResponseTypes ( ) . isEmpty ( ) ) { LOGGER . debug ( "Checking response type [{}] against supported response types [{}]" , responseType , registeredService . getSupportedResponseTypes ( ) ) ; return registeredService . getSupportedResponseTypes ( ) . stream ( ) . anyMatch ( s -> s . equalsIgnoreCase ( responseType ) ) ; } LOGGER . warn ( "Registered service [{}] does not define any authorized/supported response types. " + "It is STRONGLY recommended that you authorize and assign response types to the service definition. " + "While just a warning for now, this behavior will be enforced by CAS in future versions." , registeredService . getName ( ) ) ; return true ; }
Is authorized response type for service?