diff --git a/openid-connect-server/src/main/java/org/mitre/openid/connect/web/ProtectedResourceRegistrationEndpoint.java b/openid-connect-server/src/main/java/org/mitre/openid/connect/web/ProtectedResourceRegistrationEndpoint.java index 0c4ca78de..da2d77f08 100644 --- a/openid-connect-server/src/main/java/org/mitre/openid/connect/web/ProtectedResourceRegistrationEndpoint.java +++ b/openid-connect-server/src/main/java/org/mitre/openid/connect/web/ProtectedResourceRegistrationEndpoint.java @@ -290,6 +290,8 @@ public class ProtectedResourceRegistrationEndpoint { // a client can't ask to update its own client secret to any particular value newClient.setClientSecret(oldClient.getClientSecret()); + newClient.setCreatedAt(oldClient.getCreatedAt()); + // no grant types are allowed newClient.setGrantTypes(new HashSet<String>()); newClient.setResponseTypes(new HashSet<String>());