fix(oxauth): when acr_values has multiple values, order of processing…

… is not always preserved #1922
GluuFederation · Sep 20, 2024 · 630064c · 630064c
1 parent 34e88b2
commit 630064c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/Server/src/main/java/org/gluu/oxauth/service/SessionIdService.java b/Server/src/main/java/org/gluu/oxauth/service/SessionIdService.java
@@ -930,9 +930,9 @@ public List<String> acrValuesList(String acrValues) {
         } catch (JSONException ex) {
             acrs = Util.splittedStringAsList(acrValues, " ");
         }
-        
-        
-        HashSet<String> resultAcrs = new HashSet<String>();
+
+
+        LinkedHashSet<String> resultAcrs = new LinkedHashSet<String>();
         for (String acr : acrs) {
         	resultAcrs.add(externalAuthenticationService.scriptName(acr));
         }