Program: 42883
Project: 42883
Buggy source:
@Override public CommandResponse execute(GetAuthorizationUrlParams params) throws Exception {
  final Rp site=getRp();
  String authorizationEndpoint=getDiscoveryService().getConnectDiscoveryResponse(site).getAuthorizationEndpoint();
  List<String> scope=Lists.newArrayList();
  if (params.getScope() != null && !params.getScope().isEmpty()) {
    scope.addAll(params.getScope());
  }
 else   if (site.getScope() != null) {
    scope.addAll(site.getScope());
  }
  authorizationEndpoint+="String_Node_Str" + Utils.joinAndUrlEncode(site.getResponseTypes());
  authorizationEndpoint+="String_Node_Str" + site.getClientId();
  authorizationEndpoint+="String_Node_Str" + site.getAuthorizationRedirectUri();
  authorizationEndpoint+="String_Node_Str" + Utils.joinAndUrlEncode(scope);
  authorizationEndpoint+="String_Node_Str" + getStateService().generateState();
  authorizationEndpoint+="String_Node_Str" + getStateService().generateNonce();
  String acrValues=Utils.joinAndUrlEncode(acrValues(site,params)).trim();
  if (!Strings.isNullOrEmpty(acrValues)) {
    authorizationEndpoint+="String_Node_Str" + acrValues;
  }
  if (!Strings.isNullOrEmpty(params.getPrompt())) {
    authorizationEndpoint+="String_Node_Str" + params.getPrompt();
  }
  if (!Strings.isNullOrEmpty(params.getHostedDomain())) {
    authorizationEndpoint+="String_Node_Str" + params.getHostedDomain();
  }
  if (params.getCustomParameters() != null && !params.getCustomParameters().isEmpty()) {
    authorizationEndpoint+="String_Node_Str" + AuthorizeRequestParam.CUSTOM_RESPONSE_HEADERS + "String_Node_Str"+ Util.mapAsString(params.getCustomParameters());
  }
  return okResponse(new GetAuthorizationUrlResponse(authorizationEndpoint));
}

Fixed version (ground truth):
@Override public CommandResponse execute(GetAuthorizationUrlParams params) throws Exception {
  final Rp site=getRp();
  String authorizationEndpoint=getDiscoveryService().getConnectDiscoveryResponse(site).getAuthorizationEndpoint();
  List<String> scope=Lists.newArrayList();
  if (params.getScope() != null && !params.getScope().isEmpty()) {
    scope.addAll(params.getScope());
  }
 else   if (site.getScope() != null) {
    scope.addAll(site.getScope());
  }
  authorizationEndpoint+="String_Node_Str" + Utils.joinAndUrlEncode(site.getResponseTypes());
  authorizationEndpoint+="String_Node_Str" + site.getClientId();
  authorizationEndpoint+="String_Node_Str" + site.getAuthorizationRedirectUri();
  authorizationEndpoint+="String_Node_Str" + Utils.joinAndUrlEncode(scope);
  authorizationEndpoint+="String_Node_Str" + getStateService().generateState();
  authorizationEndpoint+="String_Node_Str" + getStateService().generateNonce();
  String acrValues=Utils.joinAndUrlEncode(acrValues(site,params)).trim();
  if (!Strings.isNullOrEmpty(acrValues)) {
    authorizationEndpoint+="String_Node_Str" + acrValues;
  }
  if (!Strings.isNullOrEmpty(params.getPrompt())) {
    authorizationEndpoint+="String_Node_Str" + params.getPrompt();
  }
  if (!Strings.isNullOrEmpty(params.getHostedDomain())) {
    authorizationEndpoint+="String_Node_Str" + params.getHostedDomain();
  }
  if (params.getCustomParameters() != null && !params.getCustomParameters().isEmpty()) {
    authorizationEndpoint+="String_Node_Str" + AuthorizeRequestParam.CUSTOM_RESPONSE_HEADERS + "String_Node_Str"+ Utils.encode(Util.mapAsString(params.getCustomParameters()));
  }
  return okResponse(new GetAuthorizationUrlResponse(authorizationEndpoint));
}