IBM Verify

 View Only

 Filtering OAuth2 scopes

Stéphane MASSON's profile image
Stéphane MASSON posted 12/16/24 11:44 AM

Hi,

Does anyone know how to change the scope attribute returned in the token endpoint?

I mean here:

curl ..../oauth20/token

=>

{"access_token":"ey...n6","scope":"overridden_scope1 overridden_scope2",...

I tried this but this is not working:

stsuu.addContextAttribute(new com.tivoli.am.fim.trustserver.sts.uuserAttribute(

        "scope", "urn:ibm:names:ITFIM:oauth:response:attribute", scopeString)); // NOK

stsuu.addContextAttribute(new com.tivoli.am.fim.trustserver.sts.uuser.Attribute(

        "urn:ibm:ITFIM:oauth20:custom:token:scope", "", scopeString)); // NOK

Thanks a lot

Stéphane MASSON's profile image
Stéphane MASSON

This is on ISVA