feat(jans-lock): redirect for consent if external script is enabled a… (

#10771) feat(jans-lock): redirect for consent if external script is enabled and client is not authorized Signed-off-by: Yuriy Movchan <[email protected]>
JanssenProject · Jan 31, 2025 · c3e4a97 · c3e4a97
1 parent ba5de5b
commit c3e4a97
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/...r/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java b/...r/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java
@@ -77,6 +77,7 @@
 
 import static io.jans.as.server.authorize.ws.rs.AuthzRequestService.canLogWebApplicationException;
 import static org.apache.commons.lang3.BooleanUtils.isTrue;
+import static org.apache.commons.lang3.BooleanUtils.isFalse;
 import static org.apache.commons.lang3.BooleanUtils.toBoolean;
 
 /**
@@ -174,6 +175,9 @@ public class AuthorizeRestWebServiceImpl implements AuthorizeRestWebService {
     @Inject
     private ExternalResourceOwnerPasswordCredentialsService externalResourceOwnerPasswordCredentialsService;
 
+    @Inject
+    private ExternalConsentGatheringService externalConsentGatheringService;
+
     @Inject
     private DpopService dpopService;
 
@@ -604,7 +608,10 @@ private void checkPromptConsent(AuthzRequest authzRequest, SessionId sessionUser
             return;
         }
 
-        if (authzRequest.getPromptList().contains(Prompt.CONSENT) || !isTrue(sessionUser.isPermissionGrantedForClient(authzRequest.getClientId()))) {
+        if (authzRequest.getPromptList().contains(Prompt.CONSENT) || (!isTrue(sessionUser.isPermissionGrantedForClient(authzRequest.getClientId())) || externalConsentGatheringService.isEnabled())) {
+        	if (!authzRequest.getPromptList().contains(Prompt.CONSENT) && isTrue(sessionUser.isPermissionGrantedForClient(authzRequest.getClientId()))) {
+        		return;
+        	}
             if (!clientAuthorizationFetched) {
                 clientAuthorization = clientAuthorizationsService.find(user.getAttribute("inum"), authzRequest.getClient().getClientId());
             }