-
Bug
-
Resolution: Unresolved
-
Trivial
-
None
-
None
-
None
Noticed that access_token claims are not updated when we are trying to update token by calling auth/realms/myrealm/protocol/openid-connect/token endpoint with grant_type: refresh_token or grant_type: authorization_code.
- Create a new oidc provider, OIDC_Provider
- Setup 'Attribute Importer' mappers, e.g. customerid, shopperid
- Create a client for demospa,
- Request authentication from demospa
- Complete authentication, receive access token and refresh token in demoapp
- Observe that the claims is good - we haven't populated the customerid, shopperid claims.
- Proceed to update claims on OIDC_Provider and update customerid and shopperid. **
- Request a new access token using grant_type=refresh_token and observe that the claim does not have customerid, shopperid from the new access token.
- Request a new access token using {{grant_type=authorization_code }}and observe that the claim does not have customerid, shopperid from the new access token.
- Log out from the session.
- Request authentication from demospa
- Observe the claim customerid, shopperid appears in the access_token.
I would have thought steps 8 and 9, would update the refresh_token. Is the the same expectation as well?