/userinfo endpoint returns all the roles assigned to user instead of the token obtained application related roles

[AnuradhaSK]

Description

1. Create two applications which consume app audience roles and org audince roles
2. Create some roles in the system while having the same name for app audience role and org audience role too
3. Create a user and assign all the roles to him

4. In a created app enable password grant, request roles as required attribute (I used the app role consuming application)
5. Get an access token and id token using password grant for the user mentioned in step 3
6. Decode the id token, you can see the roles assigned to the user related to that application

7. Invoke /userinfo endpoint with the obtained token. It returns all user assigned roles. If there are more roles with same name(in multiple audiences) it can't be distinguished as well

Steps to Reproduce

Refer to the description

Version

IS-7.1.0-beta2-SNAPSHOT

Environment Details (with versions)

No response

[shashimalcse]

This issue is not reproducible with the code grant because attributes are retrieving from the cache Still we need to fix the role claim resolver for other grants and when the cache attributes are not there. This PR will address the issue but we might have to keep the backward compatibility.

[DMHP]

Due to the backward incompatibility issue will take off from the IS 7.1 board.