fix: add azp claim in auth_code flow only

* fixes #752 Co-authored-by: tronghn <[email protected]> Co-authored-by: kimtore <[email protected]>
navikt · Oct 30, 2024 · 5aa7bdb · 5aa7bdb
1 parent 933ea62
commit 5aa7bdb
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/kotlin/no/nav/security/mock/oauth2/token/OAuth2TokenCallback.kt b/src/main/kotlin/no/nav/security/mock/oauth2/token/OAuth2TokenCallback.kt
@@ -62,7 +62,9 @@ open class DefaultOAuth2TokenCallback
                 "tid" to issuerId,
             ).apply {
                 putAll(claims)
-                put("azp", tokenRequest.clientIdAsString())
+                if (tokenRequest.grantType() == GrantType.AUTHORIZATION_CODE) {
+                    put("azp", tokenRequest.clientIdAsString())
+                }
             }
 
         override fun tokenExpiry(): Long = expiry