Skip to content

Support newer UAA response fields and grant types#1340

Open
jorbaum wants to merge 5 commits intocloudfoundry:mainfrom
jorbaum:support-new-uaa
Open

Support newer UAA response fields and grant types#1340
jorbaum wants to merge 5 commits intocloudfoundry:mainfrom
jorbaum:support-new-uaa

Conversation

@jorbaum
Copy link

@jorbaum jorbaum commented Mar 13, 2026

Different (likely newer?) versions of the open-source UAA (tested against v78.6.0) return fields and values that the client doesn't model, causing deserialization failures.

This PR adds support for:

  • urn:ietf:params:oauth:grant-type:jwt-bearer grant type (RFC 7523)
  • defaultIdentityProvider in identity zone configuration (added to OSS UAA in 2018)
  • defaultIdpName in the /info endpoint response (source)

Integration test changes:

  • Relaxed assertion for UAA "access denied" error message wording
  • Check for login endpoint instead of password reset endpoint which might be disabled for some UAA

AI tools used: Claude Code and GitHub Copilot (Opus 4.6) assisted me during development. I reviewed the result.

Tests login endpoint instead, which should usually be present
@Kehrlann Kehrlann self-requested a review March 24, 2026 10:00
Copy link
Contributor

@Kehrlann Kehrlann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, please target 5.x.x

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants