remove enroll and verify tokens from query params

wso2-extensions · Mar 20, 2024 · f425d32 · f425d32
1 parent 473834d
commit f425d32
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...n/java/org/wso2/carbon/identity/application/authenticator/iproov/IproovAuthenticator.java b/...n/java/org/wso2/carbon/identity/application/authenticator/iproov/IproovAuthenticator.java
@@ -295,11 +295,11 @@ protected void initiateIproovAuthenticationRequest(HttpServletRequest request, H
             Map<String, String> queryParams = new HashMap<>();
             if (verifyToken != null) {
                 context.setProperty(IproovAuthenticatorConstants.VERIFY_TOKEN, verifyToken);
-                queryParams.put(IproovAuthenticatorConstants.VERIFY_TOKEN, verifyToken);
+                context.getEndpointParams().put(IproovAuthenticatorConstants.VERIFY_TOKEN, verifyToken);
             }
             if (enrollToken != null) {
                 context.setProperty(IproovAuthenticatorConstants.ENROLL_TOKEN, enrollToken);
-                queryParams.put(IproovAuthenticatorConstants.ENROLL_TOKEN, enrollToken);
+                context.getEndpointParams().put(IproovAuthenticatorConstants.ENROLL_TOKEN, enrollToken);
             }
             if (IproovAuthenticatorConstants.Verification.RETRY.equals(request.getParameter(
                     IproovAuthenticatorConstants.SCENARIO))) {