Claims policy not applied to JWT Profile Access Tokens
Claims policy not applied to JWT Profile Access Tokens: a task in LegoFlow-SWE (Harbor dataset). When a JWT Profile Access Token is generated for an OIDC client with a configured claims policy, the claims included in the token do not respect the policy. The policy should filter which user claims…
The task
When a JWT Profile Access Token is generated for an OIDC client with a configured claims policy, the claims included in the token do not respect the policy. The policy should filter which user claims from the access token session are included in the final JWT, but the policy is either not applied or applied…
Part of Lego-X/LegoFlow-SWE.