add requestScopes for token exchange (#299)

cloudentity · Jan 29, 2024 · 2288c7c · 2288c7c
1 parent bd22228
commit 2288c7c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/charts/istio-authorizer/templates/configmap.yaml b/charts/istio-authorizer/templates/configmap.yaml
@@ -41,6 +41,7 @@ data:
           original_token: {{ .tokenExchange.inject.headers.originalToken }}
           exchanged_token: {{ .tokenExchange.inject.headers.exchangedToken }}
           strip_bearer: {{ .tokenExchange.inject.headers.stripBearer }}
+      request_scopes: {{ .tokenExchange.requestScopes }}
     {{- end }}
   extraconfig.yaml: |
     {{- with .Values.extraConfig }}

diff --git a/charts/istio-authorizer/values.yaml b/charts/istio-authorizer/values.yaml
@@ -262,6 +262,10 @@ tokenExchange:
       ##
       stripBearer: false
 
+  # Describes what scopes should be requested for a new token
+  # One of: client | original_token
+  requestScopes: "original_token"
+
 ## ACP http client configuration
 ##
 # httpClient: