feat(jans-auth-server): renamed "code"->"random" uniqueness claims of…

… id_token to avoid confusion with Authorization Code Flow #3466
JanssenProject · Dec 30, 2022 · 3950f0c · 3950f0c
1 parent f0e98e8
commit 3950f0c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/jans-auth-server/server/src/main/java/io/jans/as/server/model/token/IdTokenFactory.java b/jans-auth-server/server/src/main/java/io/jans/as/server/model/token/IdTokenFactory.java
@@ -142,7 +142,7 @@ private void fillClaims(JsonWebResponse jwr,
 
         jwr.getClaims().setExpirationTime(expiration);
         jwr.getClaims().setIssuedAt(issuedAt);
-        jwr.setClaim("code", UUID.randomUUID().toString());
+        jwr.setClaim("random", UUID.randomUUID().toString()); // provided uniqueness of id_token for same RP requests, oxauth: 1493
 
         if (executionContext.getPreProcessing() != null) {
             executionContext.getPreProcessing().apply(jwr);