e8dd1325fd
Error messages sent by BearerTokenAccessDeniedHandler included information about the scopes of the rejected token instead of the scopes required by the resource. * Removal of token scopes from error_description attribute. * Removal of scope attribute from WWW-Authenticate response header. Fixes gh-7089 |
||
---|---|---|
.. | ||
oauth2-client | ||
oauth2-core | ||
oauth2-jose | ||
oauth2-resource-server |