Honor custom_access_token_attributes in client credentials grant flow #1673
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This change supports the
custom_access_token_attributes
configuration for Client Credentials grant_flow type.Without this change, the custom configured attributes are not passed along during the token creation for client credentials requests, which leads to an error similar to:
If a default of null is provided for the field instead, the result will be the column is not populated with the tenant_id provided during the client credentials request.
Other Information
Steps to reproduce:
grant_flows %w[client_credentials]
andcustom_access_token_attributes [:tenant_id]
oauth_access_tokens
andoauth_access_grants
tables with thetenant_id
field as described by the initializer comment for custom_access_token_attributes.tenant_id
field is not passed along during token creation.