Make iat, jti and exp claims mandatory in DCR request

wso2 · Nov 13, 2024 · bd0b584 · bd0b584
1 parent 5d8cc6b
commit bd0b584
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/...ity/src/main/java/org/wso2/openbanking/cds/identity/dcr/model/CDSRegistrationRequest.java b/...ity/src/main/java/org/wso2/openbanking/cds/identity/dcr/model/CDSRegistrationRequest.java
@@ -63,6 +63,24 @@ public RegistrationRequest getRegistrationRequest() {
         return registrationRequest;
     }
 
+    @Override
+    public String getJti() {
+
+        return registrationRequest.getJti();
+    }
+
+    @Override
+    public String getIat() {
+
+        return registrationRequest.getIat();
+    }
+
+    @Override
+    public String getExp() {
+
+        return registrationRequest.getExp();
+    }
+
     @Override
     public String getTokenEndPointAuthentication() {
 

diff --git a/toolkits/ob-is/repository/resources/wso2is-6.0.0-deployment-cds.toml b/toolkits/ob-is/repository/resources/wso2is-6.0.0-deployment-cds.toml
@@ -542,6 +542,15 @@ display = "ob-identifier-first"
 name = "SMSAuthentication"
 step = 2
 
+[open_banking.dcr.registration.iat]
+required = true
+
+[open_banking.dcr.registration.exp]
+required = true
+
+[open_banking.dcr.registration.jti]
+required = true
+
 [open_banking.dcr.registration.grant_types]
 allowed_values = ["authorization_code", "refresh_token", "client_credentials"]