[CXF-4673] [OAuth2] Add requestedScope as a parameter to getPreauthorizedToken

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7
• Fix Version/s: 2.6.4, 2.7.1
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Steven Tippetts
• Created: 04/Dec/12 18:21
• Updated: 19/Dec/12 14:38
• Resolved: 05/Dec/12 13:30

Description

When using pre-authorized tokens I need the requested scope to be able to create the token.

Please change the OAuthDataProvider interface to include:

ServerAccessToken getPreauthorizedToken(Client client,
                                        UserSubject subject,
                                        String grantType, 
                                        List<String> requestedScope)
    throws OAuthServiceException;

And change RedirectionBasedGrantService.java and AbstractGrantHandler.java to pass the requestedScope variable in to getPreauthorizedToken.

Thanks.