diff --git a/openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectAuthorizationRequestManager.java b/openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectAuthorizationRequestManager.java index 5fd4d7d51..7bca1cd87 100644 --- a/openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectAuthorizationRequestManager.java +++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectAuthorizationRequestManager.java @@ -122,7 +122,10 @@ public class ConnectAuthorizationRequestManager implements AuthorizationRequestM Set clientScopes = client.getScope(); scopes = clientScopes; } - DefaultAuthorizationRequest request = new DefaultAuthorizationRequest(inputParams, Collections. emptyMap(), clientId, scopes); + + + // note that we have to inject the processed parameters in at this point so that SECOAUTH can find them later (and this object will get copy-constructored away anyway) + DefaultAuthorizationRequest request = new DefaultAuthorizationRequest(parameters, Collections. emptyMap(), clientId, scopes); request.addClientDetails(client); return request;