service.rb in authlete-1.0.24

- old
+ new

@@ -586,10 +586,23 @@
       # Authorization Request) (if +false+). (Boolean)
       attr_accessor :traditionalRequestObjectProcessingApplied
       alias_method  :traditional_request_object_processing_applied,  :traditionalRequestObjectProcessingApplied
       alias_method  :traditional_request_object_processing_applied=, :traditionalRequestObjectProcessingApplied=
 
+      # Flag of whether claims specified by shortcut scopes (e.g. profile)
+      # are included in the issued ID token only when no access token is issued.
+      # (Boolean)
+      attr_accessor :claimShortcutRestrictive
+      alias_method  :claim_shortcut_restrictive,  :claimShortcutRestrictive
+      alias_method  :claim_shortcut_restrictive=, :claimShortcutRestrictive=
+
+      # Flag of whether requests that request no scope are rejected or not.
+      # (Boolean)
+      attr_accessor :scopeRequired
+      alias_method  :scope_required,  :scopeRequired
+      alias_method  :scope_required=, :scopeRequired=
+
       private
 
       # Integer attributes.
       INTEGER_ATTRIBUTES = ::Set.new([
         :accessTokenDuration, :allowableClockSkew, :apiKey, :authorizationResponseDuration,
@@ -600,18 +613,18 @@
       ])
 
       # Boolean attributes.
       BOOLEAN_ATTRIBUTES = ::Set.new([
         :backchannelBindingMessageRequiredInFapi, :backchannelUserCodeParameterSupported,
-        :clientIdAliasEnabled,
+        :claimShortcutRestrictive, :clientIdAliasEnabled,
         :directAuthorizationEndpointEnabled, :directIntrospectionEndpointEnabled,
         :directJwksEndpointEnabled, :directRevocationEndpointEnabled, :directTokenEndpointEnabled,
         :directUserInfoEndpointEnabled, :errorDescriptionOmitted, :errorUriOmitted,
         :mutualTlsValidatePkiCertChain, :pkceRequired, :pkceS256Required, :refreshTokenKept,
         :singleAccessTokenPerSubject, :tlsClientCertificateBoundAccessTokens,
         :dynamicRegistrationSupported, :missingClientIdAllowed, :refreshTokenDurationKept,
-        :parRequired, :requestObjectRequired, :traditionalRequestObjectProcessingApplied
+        :parRequired, :requestObjectRequired, :scopeRequired, :traditionalRequestObjectProcessingApplied
       ])
 
       # String attributes.
       STRING_ATTRIBUTES = ::Set.new([
         :accessTokenSignAlg, :accessTokenSignatureKeyId, :accessTokenType,
@@ -737,10 +750,12 @@
         :supported_verified_claims                     => :supportedVerifiedClaims,
         :missing_client_id_allowed                     => :missingClientIdAllowed,
         :refresh_token_duration_kept                   => :refreshTokenDurationKept,
         :par_required                                  => :parRequired,
         :request_object_required                       => :requestObjectRequired,
-        :traditional_request_object_processing_applied => :traditionalRequestObjectProcessingApplied
+        :traditional_request_object_processing_applied => :traditionalRequestObjectProcessingApplied,
+        :claim_shortcut_restrictive                    => :claimShortcutRestrictive,
+        :scope_required                                => :scopeRequired
       }
 
       # The constructor
       def initialize(hash = nil)
         # Set default values to integer attributes.
\ No newline at end of file