From 9728f28380a18c7f7333a1472656ffefb7af0973 Mon Sep 17 00:00:00 2001
From: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>
Date: Fri, 15 Mar 2024 14:32:26 -0500
Subject: [PATCH] Add additional constants to OAuth2ParameterNames

These additional constants are used for optional parameters in the
Access Token Request for the OAuth 2.0 Token Exchange Grant.

Issue gh-5199
---
 .../oauth2/core/endpoint/OAuth2ParameterNames.java   | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/OAuth2ParameterNames.java b/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/OAuth2ParameterNames.java
index d482d7c196..125d242873 100644
--- a/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/OAuth2ParameterNames.java
+++ b/oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/OAuth2ParameterNames.java
@@ -182,6 +182,18 @@ public final class OAuth2ParameterNames {
 	 */
 	public static final String INTERVAL = "interval";
 
+	/**
+	 * {@code audience} - used in Token Exchange Access Token Request.
+	 * @since 6.3
+	 */
+	public static final String AUDIENCE = "audience";
+
+	/**
+	 * {@code resource} - used in Token Exchange Access Token Request.
+	 * @since 6.3
+	 */
+	public static final String RESOURCE = "resource";
+
 	/**
 	 * {@code requested_token_type} - used in Token Exchange Access Token Request.
 	 * @since 6.3