Fix missing claims for OpenID code flow. (#14686)

OrchardCMS · Nov 14, 2023 · 3c5b6b1 · 3c5b6b1
1 parent ba97ebc
commit 3c5b6b1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/OrchardCore.Modules/OrchardCore.OpenId/Controllers/AccessController.cs b/src/OrchardCore.Modules/OrchardCore.OpenId/Controllers/AccessController.cs
@@ -593,6 +593,9 @@ private async Task<IActionResult> ExchangeAuthorizationCodeOrRefreshTokenGrantTy
                 if (user != null)
                 {
                     principal = await service.CreatePrincipalAsync(user);
+                    // Copy the granted scopes and resources from the original authorization code/refresh token principal
+                    principal.SetScopes(info.Principal.GetScopes());
+                    principal.SetResources(await GetResourcesAsync(info.Principal.GetScopes()));
                 }
             }