Repository navigation
Dynamic scopes do not work with CIBA #49388
Description
Before reporting an issue
- I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
oidc
Describe the bug
Checking dynamic scopes I detected that tehy don't work for CIBA. The reason is that the scopes are just checked normally without considering dynamic scopes. This can happen in other places so I think we should change the TokenManager.isValidScope to always consider the dynamic scopes if feature is enabled.
Version
999.0.0-SNAPSHOT
Regression
- The issue is a regression
Expected behavior
Dynamic scopes can be request using CIBA.
Actual behavior
Currently the dynamic scope is considered as invalid and the request for CIBA fails.
How to Reproduce?
Just perform some CIBA request using a dynamic scope. For example you can follow this tutorial and see the initial request fails because the dynamic scope is detected as invalid.
Anything else?
No response
Reacted by Martin Bartoš
Metadata
Metadata
Assignees
Labels
Type
Fields
No fields configured for bug.
Projects
- Status
Activity
Add new method variants for isValidScope without the parameter user
Change TokenManager.isValidScope to always consider dynamic scopes
Add new method variants for isValidScope without the parameter user
18 remaining items
Change TokenManager.isValidScope to always consider dynamic scopes
Add new method variants for isValidScope without the parameter user