[java-idp-oidc] 02/02: JOIDC-282 - OAuth2Client authentication flow should map AccessDenied properly

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/136a216c7be67976a922cf3f0dafb88619a91d7d

commit 136a216c7be67976a922cf3f0dafb88619a91d7d
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Jun 18 10:29:49 2026 +0300

    JOIDC-282 - OAuth2Client authentication flow should map AccessDenied properly
    
    https://shibboleth.atlassian.net/browse/JOIDC-282
---
 .../net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-flow.xml   | 1 +
 .../net/shibboleth/idp/plugin/oidc/op/profile/flow/TokenFlowTest.java   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-flow.xml
index 8a88bda0..a75eb608 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-flow.xml
@@ -35,6 +35,7 @@
         <transition on="InvalidCredentials" to="ReselectFlow" />
         <transition on="RequestUnsupported" to="ReselectFlow" />
         <transition on="UnknownUsername" to="ReselectFlow" />
+        <transition on="AccessDenied" to="ReselectFlow" />
     </global-transitions>
 
     <bean-import resource="OAuth2Client-beans.xml" />
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/TokenFlowTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/TokenFlowTest.java
index a3cbd3cd..2d2bbc8d 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/TokenFlowTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/TokenFlowTest.java
@@ -661,7 +661,7 @@ public class TokenFlowTest extends AbstractOidcClientAuthenticationFlowTest {
                 buildAuthorizationCode(clientId), clientId), true, ClientAuthenticationMethod.NONE);
         storeConsent(storageService, "jdoe", clientId, "mail");
         final FlowExecutionResult result = flowExecutor.launchExecution(FLOW_ID, null, externalContext);
-        assertErrorCode(result, OAuth2Error.INVALID_REQUEST_CODE);
+        assertErrorCode(result, OAuth2Error.INVALID_CLIENT_CODE);
     }
 
     @Test

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.