Skip to content

Support newer UAA response fields and grant types#1340

Open
jorbaum wants to merge 5 commits intocloudfoundry:mainfrom
jorbaum:support-new-uaa
Open

Support newer UAA response fields and grant types#1340
jorbaum wants to merge 5 commits intocloudfoundry:mainfrom
jorbaum:support-new-uaa

Conversation

@jorbaum
Copy link

@jorbaum jorbaum commented Mar 13, 2026

Different (likely newer?) versions of the open-source UAA (tested against v78.6.0) return fields and values that the client doesn't model, causing deserialization failures.

This PR adds support for:

  • urn:ietf:params:oauth:grant-type:jwt-bearer grant type (RFC 7523)
  • defaultIdentityProvider in identity zone configuration (added to OSS UAA in 2018)
  • defaultIdpName in the /info endpoint response (source)

Integration test changes:

  • Relaxed assertion for UAA "access denied" error message wording
  • Check for login endpoint instead of password reset endpoint which might be disabled for some UAA

Tests login endpoint instead, which should usually be present
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant