[FIXED] Spring Authorization server customizing the access token response to add additional params

Issue

I am implementing the spring authorization server and I want to add few custom properties to the token response json. Below is how I want the response to be.

{
    "access_token": *jwt*,
    "scope": "articles.read openid",
    "token_type": "Bearer",
    "expires_in": 299,
    ***"customvalue1":99***
}

I have seen multiple posts in stack overflow where similar topic is discussed, but in those scenarios the additional data is added either to the claim or header of jwt. My requirement is to add it outside of the jwt. I tried to implement OAuth2TokenCustomizer, but this allows only the claims or headers of the jwt to be modified. Can anyone pls help?

Solution

To anyone coming here looking for answer:

I ended up overriding OAuth2TokenEndpointFilter. It has a authentication successhandler which can be injected to perform any additional token response manipulation. Eg:

 Map<String, Object> additionalParameters = accessTokenAuthentication.getAdditionalParameters();
        if(additionalParameters.size()==0)
            additionalParameters=new HashMap<>();
     additionalParameters.put("hi","hi");

Answered By - acsam
Answer Checked By - Marilyn (JavaFixing Volunteer)