keycloak-scim/testsuite/integration-arquillian/tests
Thomas Darimont 690c6051bb Fix scope policy evaluation for client to client token exchange (#26435)
Previously the scope from the token was not set available in the ClientModelIdentity attributes.
This caused the NPE in `org.keycloak.authorization.policy.provider.clientscope.ClientScopePolicyProvider.hasClientScope`(..)
when calling `identity.getAttributes().getValue("scope")`.

We now pass the provided decoded AccessToken down to the ClientModelIdentity creation
to allow to populate the required scope attribute.

We also ensure backwards compatibility for ClientPermissionManagement API.

Fixes #26435

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2024-06-28 10:33:20 +02:00
..
base Fix scope policy evaluation for client to client token exchange (#26435) 2024-06-28 10:33:20 +02:00
other Cleanup mod_auth_mellon from the testsuite 2024-06-28 08:33:36 +02:00
pom.xml Cleanup of test-apps and related adapter code 2024-06-27 15:10:31 +02:00