fix: use filter by RP if it's SG request (#5575)

Co-authored-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>
JanssenProject · Jul 19, 2023 · 2739f96 · 2739f96
1 parent 7501d3b
commit 2739f96
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/jans-fido2/server/src/main/java/io/jans/fido2/service/operation/AssertionService.java b/jans-fido2/server/src/main/java/io/jans/fido2/service/operation/AssertionService.java
@@ -340,7 +340,7 @@ private Pair<ArrayNode, String> prepareAllowedCredentials(String documentDomain,
 						String.format("Can't find associated key '%s' for application '%s'", requestedKeyHandle, documentDomain)));
 			existingFido2Registrations = Arrays.asList(fido2RegistrationEntry);
 		} else {
-			existingFido2Registrations = registrationPersistenceService.findByRpRegisteredUserDevices(username, null);
+			existingFido2Registrations = registrationPersistenceService.findByRpRegisteredUserDevices(username, superGluu ? documentDomain : null);
 		}
 		//  f.getRegistrationData().getAttenstationRequest() null check is added to maintain backward compatiblity with U2F devices when U2F devices are migrated to the FIDO2 server
 		List<Fido2RegistrationEntry> allowedFido2Registrations = existingFido2Registrations.parallelStream()