(4.2.2) id_token is missed during 2 concurrent calls for ROPC

#1493
GluuFederation · Dec 4, 2020 · c93db5c · c93db5c
1 parent f1da00a
commit c93db5c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Server/src/main/java/org/gluu/oxauth/model/token/IdTokenFactory.java b/Server/src/main/java/org/gluu/oxauth/model/token/IdTokenFactory.java
@@ -118,6 +118,7 @@ private void fillClaims(JsonWebResponse jwr,
 
         jwr.getClaims().setExpirationTime(expiration);
         jwr.getClaims().setIssuedAt(issuedAt);
+        jwr.setClaim("code", UUID.randomUUID().toString());
 
         if (preProcessing != null) {
             preProcessing.apply(jwr);