TokenRequest does not expose getRedirectionUri()

Issue #115 invalid
Former user created an issue

in OAUTH 2.0 and OIDC Authz Code Flow the token request should have redirect_uri as a parameter which the server should check that it matches the redirect_uri in the original authz request TokenRequest class does not expose this

Comments (2)

  1. Connect2id OSS

    The TokenRequest class is used with various OAuth grants, not just for authorisation code grants. The redirect_uri parameter is therefore not a direct part of it.

    To extract the redirect_uri, first call getAuthorizationGrant().getType() to ensure the grant type is indeed code.

    Then do a cast to AuthorizationCodeGrant and call its getRedirectionURI() method.

    Cheers,

    Your Connect2id Support Team

  2. Log in to comment