Open
Description
Description
For the token-exchange-external-internal:v2 , we should make sure that same rules are applied when issuing internal token like during token-exchange-standard:v2 . So using scopes and audiences of the Keycloak client, which is sending the request.
We can make sure that same code is re-used between the two (maybe ExternalToInternalTokenExchangeProvider can be updated to extend from StandardTokenExchangeProvider or AbstractTokenExchangeProvider. There are also other issues related to that).