[IS730] IDN_AUTH_SESSION_STORE.SESSION_OBJECT (BLOB) truncates for large authorization_details payloads

[aka4rKO]

Description

When an OAuth2/OIDC authorization request includes a moderately large but entirely valid authorization_details payload (Rich Authorization Requests, RFC 9396) - e.g. a fully-populated UK Open Banking domestic payment initiation object with nested Initiation/Risk/Authorisation/PostalAddress fields - session persistence during /authorize fails with a MySQL data truncation error

Steps to Reproduce

1. Register an API resource with the domestic_payment authorization_details type — the full UK Open Banking Payment Initiation schema (uses internal $ref/$defs, same pattern as Issue 1):

   curl -sk -u <ADMIN_USERNAME>:<ADMIN_PASSWORD> -X POST \
     "https://localhost:9443/api/server/v1/api-resources" \
     -H "Content-Type: application/json" \
     -d '{
       "name": "Payments API",
       "identifier": "payments_api",
       "description": "UK Open Banking Payment Initiation (PISP) API - RAR authorization details types",
       "requiresAuthorization": false,
       "authorizationDetailsTypes": [
         {
           "type": "domestic_payment",
           "name": "Domestic Payment Type",
           "description": "Domestic single immediate payment initiation authorization details",
           "schema": {
             "$schema": "https://json-schema.org/draft/2020-12/schema",
             "type": "object",
             "additionalProperties": false,
             "required": ["type", "Initiation"],
             "properties": {
               "type": { "type": "string", "const": "domestic_payment" },
               "version": { "type": "string" },
               "ReadRefundAccount": { "type": "string", "enum": ["No", "Yes"] },
               "Permission": { "type": "string", "enum": ["Create"] },
               "Initiation": {
                 "type": "object",
                 "additionalProperties": false,
                 "required": ["InstructionIdentification", "EndToEndIdentification", "InstructedAmount", "CreditorAccount"],
                 "properties": {
                   "InstructionIdentification": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "EndToEndIdentification": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "LocalInstrument": { "$ref": "#/$defs/LocalInstrument" },
                   "InstructedAmount": { "$ref": "#/$defs/ActiveCurrencyAndAmount" },
                   "DebtorAccount": { "$ref": "#/$defs/DebtorAccount" },
                   "CreditorAgent": { "$ref": "#/$defs/CreditorAgent" },
                   "CreditorAccount": { "$ref": "#/$defs/CreditorAccount" },
                   "CreditorPostalAddress": { "$ref": "#/$defs/PostalAddress" },
                   "UltimateCreditor": { "$ref": "#/$defs/UltimateParty" },
                   "UltimateDebtor": { "$ref": "#/$defs/UltimateParty" },
                   "RegulatoryReporting": { "type": "array", "items": { "$ref": "#/$defs/RegulatoryReporting" }, "maxItems": 10 },
                   "RemittanceInformation": { "$ref": "#/$defs/RemittanceInformation" },
                   "SupplementaryData": { "$ref": "#/$defs/SupplementaryData" }
                 }
               },
               "Authorisation": { "$ref": "#/$defs/Authorisation" },
               "SCASupportData": { "$ref": "#/$defs/SCASupportData" },
               "Risk": { "$ref": "#/$defs/Risk" }
             },
             "$defs": {
               "CurrencyCode": { "type": "string", "pattern": "^[A-Z]{3,3}$" },
               "CountryCode": { "type": "string", "pattern": "^[A-Z]{2,2}$" },
               "LEI": { "type": "string", "pattern": "^[A-Z0-9]{18,18}[0-9]{2,2}$", "minLength": 1, "maxLength": 20 },
               "AmountSimpleType": { "type": "string", "pattern": "^\\d{1,13}$|^\\d{1,13}\\.\\d{1,5}$" },
               "ActiveCurrencyAndAmount": {
                 "type": "object", "additionalProperties": false, "required": ["Amount", "Currency"],
                 "properties": { "Amount": { "$ref": "#/$defs/AmountSimpleType" }, "Currency": { "$ref": "#/$defs/CurrencyCode" } }
               },
               "AccountSchemeName": { "type": "string", "enum": ["UK.OBIE.BBAN", "UK.OBIE.IBAN", "UK.OBIE.PAN", "UK.OBIE.Paym", "UK.OBIE.SortCodeAccountNumber", "UK.OBIE.Wallet"] },
               "FinancialInstitutionSchemeName": { "type": "string", "enum": ["UK.OBIE.BICFI"] },
               "LocalInstrument": { "type": "string", "enum": ["UK.OBIE.BACS", "UK.OBIE.BalanceTransfer", "UK.OBIE.CHAPS", "UK.OBIE.Euro1", "UK.OBIE.FPS", "UK.OBIE.Link", "UK.OBIE.MoneyTransfer", "UK.OBIE.Paym", "UK.OBIE.SEPACreditTransfer", "UK.OBIE.SEPAInstantCreditTransfer", "UK.OBIE.SWIFT", "UK.OBIE.Target2"] },
               "AddressType": { "type": "string", "enum": ["BIZZ", "DLVY", "MLTO", "PBOX", "ADDR", "HOME", "CORR", "STAT"] },
               "PostalAddress": {
                 "type": "object", "additionalProperties": false,
                 "properties": {
                   "AddressType": { "$ref": "#/$defs/AddressType" },
                   "Department": { "type": "string", "minLength": 1, "maxLength": 70 },
                   "SubDepartment": { "type": "string", "minLength": 1, "maxLength": 70 },
                   "StreetName": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "BuildingNumber": { "type": "string", "minLength": 1, "maxLength": 16 },
                   "BuildingName": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "Floor": { "type": "string", "minLength": 1, "maxLength": 70 },
                   "UnitNumber": { "type": "string", "minLength": 1, "maxLength": 16 },
                   "Room": { "type": "string", "minLength": 1, "maxLength": 70 },
                   "PostBox": { "type": "string", "minLength": 1, "maxLength": 16 },
                   "TownLocationName": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "DistrictName": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "CareOf": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "PostCode": { "type": "string", "minLength": 1, "maxLength": 16 },
                   "TownName": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "CountrySubDivision": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "Country": { "$ref": "#/$defs/CountryCode" },
                   "AddressLine": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 70 }, "minItems": 0, "maxItems": 7 }
                 }
               },
               "DebtorAccount": {
                 "type": "object", "additionalProperties": false, "required": ["SchemeName", "Identification"],
                 "properties": {
                   "SchemeName": { "$ref": "#/$defs/AccountSchemeName" },
                   "Identification": { "type": "string", "minLength": 1, "maxLength": 256 },
                   "Name": { "type": "string", "minLength": 1, "maxLength": 350 },
                   "SecondaryIdentification": { "type": "string", "minLength": 1, "maxLength": 34 }
                 }
               },
               "CreditorAccount": {
                 "type": "object", "additionalProperties": false, "required": ["SchemeName", "Identification", "Name"],
                 "properties": {
                   "SchemeName": { "$ref": "#/$defs/AccountSchemeName" },
                   "Identification": { "type": "string", "minLength": 1, "maxLength": 256 },
                   "Name": { "type": "string", "minLength": 1, "maxLength": 350 },
                   "SecondaryIdentification": { "type": "string", "minLength": 1, "maxLength": 34 }
                 }
               },
               "CreditorAgent": {
                 "type": "object", "additionalProperties": false,
                 "properties": {
                   "SchemeName": { "$ref": "#/$defs/FinancialInstitutionSchemeName" },
                   "Identification": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "Name": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "LEI": { "$ref": "#/$defs/LEI" },
                   "PostalAddress": { "$ref": "#/$defs/PostalAddress" }
                 }
               },
               "UltimateParty": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "Name": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "Identification": { "type": "string", "minLength": 1, "maxLength": 256 },
                   "LEI": { "$ref": "#/$defs/LEI" },
                   "SchemeName": { "$ref": "#/$defs/AccountSchemeName" },
                   "PostalAddress": { "$ref": "#/$defs/PostalAddress" }
                 }
               },
               "RegulatoryAuthority": {
                 "type": "object", "additionalProperties": true,
                 "properties": { "Name": { "type": "string", "minLength": 1, "maxLength": 140 }, "CountryCode": { "$ref": "#/$defs/CountryCode" } }
               },
               "StructuredRegulatoryReporting": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "Type": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "Date": { "type": "string", "format": "date-time" },
                   "Country": { "$ref": "#/$defs/CountryCode" },
                   "Amount": { "$ref": "#/$defs/ActiveCurrencyAndAmount" },
                   "Information": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 35 } }
                 }
               },
               "RegulatoryReporting": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "DebitCreditReportingIndicator": { "type": "string", "enum": ["CRED", "DEBT", "BOTH"] },
                   "Authority": { "$ref": "#/$defs/RegulatoryAuthority" },
                   "Details": { "type": "array", "items": { "$ref": "#/$defs/StructuredRegulatoryReporting" } }
                 }
               },
               "ReferredDocumentInformation": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "Issuer": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "Number": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "RelatedDate": { "type": "string", "format": "date-time" }
                 }
               },
               "CreditorReferenceInformation": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "Issuer": { "type": "string", "minLength": 1, "maxLength": 35 },
                   "Reference": { "type": "string", "minLength": 1, "maxLength": 35 }
                 }
               },
               "RemittanceStructured": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "ReferredDocumentInformation": { "type": "array", "items": { "$ref": "#/$defs/ReferredDocumentInformation" } },
                   "ReferredDocumentAmount": { "$ref": "#/$defs/AmountSimpleType" },
                   "CreditorReferenceInformation": { "$ref": "#/$defs/CreditorReferenceInformation" },
                   "Invoicer": { "type": "string", "minLength": 1, "maxLength": 256 },
                   "Invoicee": { "type": "string", "minLength": 1, "maxLength": 256 },
                   "TaxRemittance": { "type": "string", "minLength": 1, "maxLength": 140 },
                   "AdditionalRemittanceInformation": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 140 }, "maxItems": 3 }
                 }
               },
               "RemittanceInformation": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "Structured": { "type": "array", "items": { "$ref": "#/$defs/RemittanceStructured" } },
                   "Unstructured": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 140 } }
                 }
               },
               "SupplementaryData": { "type": "object", "additionalProperties": true },
               "Risk": {
                 "type": "object", "additionalProperties": false,
                 "properties": {
                   "PaymentContextCode": { "type": "string", "enum": ["BillingGoodsAndServicesInAdvance", "BillingGoodsAndServicesInArrears", "EcommerceMerchantInitiatedPayment", "FaceToFacePointOfSale", "TransferToSelf", "TransferToThirdParty", "BillPayment", "EcommerceGoods", "EcommerceServices", "PartyToParty", "PispPayee", "Other"] },
                   "MerchantCategoryCode": { "type": "string", "minLength": 3, "maxLength": 4 },
                   "MerchantCustomerIdentification": { "type": "string", "minLength": 1, "maxLength": 70 },
                   "ContractPresentIndicator": { "type": "boolean" },
                   "BeneficiaryPrepopulatedIndicator": { "type": "boolean" },
                   "DeliveryAddress": { "$ref": "#/$defs/PostalAddress" }
                 }
               },
               "Authorisation": {
                 "type": "object", "additionalProperties": false, "required": ["AuthorisationType"],
                 "properties": {
                   "AuthorisationType": { "type": "string", "enum": ["Any", "Single", "Multiple"] },
                   "CompletionDateTime": { "type": "string", "format": "date-time" }
                 }
               },
               "SCASupportData": {
                 "type": "object", "additionalProperties": true,
                 "properties": {
                   "RequestedSCAExemptionType": { "type": "string", "enum": ["BillPayment", "ContactlessTravel", "EcommerceGoods", "EcommerceServices", "Kiosk", "Parking", "PartyToParty"] },
                   "AppliedAuthenticationApproach": { "type": "string", "maxLength": 40, "enum": ["CA", "SCA"] },
                   "ReferencePaymentOrderId": { "type": "string", "minLength": 1, "maxLength": 40 }
                 }
               }
             }
           }
         }
       ]
     }'

   (Full schema also includes CategoryPurposeCode, PaymentPurposeCode, CreditorReferenceCode, DocumentCode, ProxyCode, MandateClassification, ExtendedAccountType, Proxy, Creditor, ExchangeRateInformation, Frequency, MandateRelatedInformation $defs — trimmed here for brevity; none of them are exercised by the reproduction payload below.)

2. Authorize an OAuth2 application (authorization_code grant) for this type:

   curl -sk -u <ADMIN_USERNAME>:<ADMIN_PASSWORD> -X POST \
     "https://localhost:9443/api/server/v1/applications/<APP_ID>/authorized-apis" \
     -H "Content-Type: application/json" \
     -d '{
       "id": "<API_RESOURCE_ID>",
       "policyIdentifier": "No Policy",
       "authorizationDetailsTypes": ["domestic_payment"]
     }'

3. Push the authorization request via PAR (/oauth2/par), with authorization_details carrying a single, realistic domestic payment instruction:

   curl -sk -u '<CLIENT_ID>:<CLIENT_SECRET>' -X POST \
     "https://localhost:9443/oauth2/par" \
     -H "Content-Type: application/x-www-form-urlencoded" \
     --data-urlencode "response_type=code" \
     --data-urlencode "client_id=<CLIENT_ID>" \
     --data-urlencode "redirect_uri=<REDIRECT_URI>" \
     --data-urlencode "scope=openid" \
     --data-urlencode 'authorization_details=[
       {
         "type": "domestic_payment",
         "version": "1.0",
         "ReadRefundAccount": "Yes",
         "Initiation": {
           "InstructionIdentification": "INSTR-DOM-0001",
           "EndToEndIdentification": "E2E-DOM-0001",
           "LocalInstrument": "UK.OBIE.FPS",
           "InstructedAmount": { "Amount": "165.88", "Currency": "GBP" },
           "DebtorAccount": {
             "SchemeName": "UK.OBIE.SortCodeAccountNumber",
             "Identification": "30080012343456",
             "Name": "Sam Morgan",
             "SecondaryIdentification": "0002"
           },
           "CreditorAgent": {
             "SchemeName": "UK.OBIE.BICFI",
             "Identification": "NWBKGB22",
             "Name": "NatWest Bank Plc",
             "LEI": "IZ9Q00LZEVUKWCQY6X15",
             "PostalAddress": {
               "AddressType": "BIZZ",
               "Department": "Corporate Banking",
               "SubDepartment": "Payments",
               "StreetName": "Bishopsgate",
               "BuildingNumber": "250",
               "BuildingName": "NatWest Tower",
               "Floor": "12",
               "UnitNumber": "A",
               "Room": "1204",
               "PostBox": "PO1",
               "TownLocationName": "London",
               "DistrictName": "City of London",
               "CareOf": "Payments Team",
               "PostCode": "EC2M 4AA",
               "TownName": "London",
               "CountrySubDivision": "Greater London",
               "Country": "GB",
               "AddressLine": ["250 Bishopsgate", "12th Floor"]
             }
           },
           "CreditorAccount": {
             "SchemeName": "UK.OBIE.SortCodeAccountNumber",
             "Identification": "08080021325698",
             "Name": "Emma Wilson",
             "SecondaryIdentification": "0003"
           },
           "CreditorPostalAddress": {
             "AddressType": "HOME",
             "Department": "N/A",
             "SubDepartment": "N/A",
             "StreetName": "Baker Street",
             "BuildingNumber": "221B",
             "BuildingName": "Baker House",
             "Floor": "1",
             "UnitNumber": "B",
             "Room": "1",
             "PostBox": "PO2",
             "TownLocationName": "London",
             "DistrictName": "Westminster",
             "CareOf": "Emma Wilson",
             "PostCode": "NW1 6XE",
             "TownName": "London",
             "CountrySubDivision": "Greater London",
             "Country": "GB",
             "AddressLine": ["221B Baker Street"]
           },
           "UltimateCreditor": {
             "Name": "Wilson Holdings Ltd",
             "Identification": "UC-1001",
             "LEI": "IZ9Q00LZEVUKWCQY6X15",
             "SchemeName": "UK.OBIE.SortCodeAccountNumber",
             "PostalAddress": {
               "AddressType": "BIZZ",
               "StreetName": "Baker Street",
               "BuildingNumber": "221B",
               "TownName": "London",
               "PostCode": "NW1 6XE",
               "Country": "GB",
               "AddressLine": ["221B Baker Street"]
             }
           },
           "UltimateDebtor": {
             "Name": "Sam Morgan",
             "Identification": "UD-2001",
             "LEI": "IZ9Q00LZEVUKWCQY6X15",
             "SchemeName": "UK.OBIE.SortCodeAccountNumber",
             "PostalAddress": {
               "AddressType": "HOME",
               "StreetName": "Abbey Road",
               "BuildingNumber": "3",
               "TownName": "London",
               "PostCode": "NW8 6AA",
               "Country": "GB",
               "AddressLine": ["3 Abbey Road"]
             }
           },
           "RegulatoryReporting": [
             {
               "DebitCreditReportingIndicator": "CRED",
               "Authority": { "Name": "HMRC", "CountryCode": "GB" },
               "Details": [
                 {
                   "Type": "VATRETURN",
                   "Date": "2026-07-15T00:00:00+00:00",
                   "Country": "GB",
                   "Amount": { "Amount": "12.50", "Currency": "GBP" },
                   "Information": ["VAT return payment"]
                 }
               ]
             }
           ],
           "RemittanceInformation": {
             "Structured": [
               {
                 "ReferredDocumentInformation": [
                   { "Code": "CINV", "Issuer": "Wilson Holdings Ltd" }
                 ],
                 "ReferredDocumentAmount": "165.88",
                 "CreditorReferenceInformation": {
                   "Code": "RADM",
                   "Issuer": "Wilson Holdings Ltd",
                   "Reference": "INV-2026-0456"
                 },
                 "Invoicer": "80200112344562",
                 "Invoicee": "80200112344563",
                 "TaxRemittance": "Standard rate VAT",
                 "AdditionalRemittanceInformation": ["Thank you for your business"]
               }
             ],
             "Unstructured": ["Invoice 456 payment"]
           },
           "SupplementaryData": {}
         },
         "Authorisation": {
           "AuthorisationType": "Single",
           "CompletionDateTime": "2026-07-15T09:00:00+00:00"
         },
         "SCASupportData": {
           "RequestedSCAExemptionType": "EcommerceGoods",
           "AppliedAuthenticationApproach": "SCA",
           "ReferencePaymentOrderId": "REF-DOM-0001"
         },
         "Risk": {
           "PaymentContextCode": "EcommerceMerchantInitiatedPayment",
           "MerchantCategoryCode": "5411",
           "MerchantCustomerIdentification": "CUST-0001",
           "ContractPresentIndicator": true,
           "BeneficiaryPrepopulatedIndicator": false,
           "PaymentPurposeCode": "CASH",
           "CategoryPurposeCode": "SUPP",
           "BeneficiaryAccountType": "Personal",
           "DeliveryAddress": {
             "AddressType": "HOME",
             "StreetName": "Baker Street",
             "BuildingNumber": "221B",
             "TownName": "London",
             "PostCode": "NW1 6XE",
             "Country": "GB",
             "AddressLine": ["221B Baker Street"]
           }
         }
       }
     ]'

   This returns a request_uri of the form urn:ietf:params:oauth:par:request_uri:<PAR_ID>.

4. As a logged-in user (cookies.txt from a prior authenticated login to this instance, same as Issues 1/2), authorize using that request_uri:

   curl -sk -b cookies.txt \
     "https://localhost:9443/oauth2/authorize?client_id=<CLIENT_ID>&request_uri=urn:ietf:params:oauth:par:request_uri:<PAR_ID>"

Result: The /authorize request fails; the server log shows:

[2026-08-07 22:58:41,122] ERROR {org.wso2.carbon.identity.application.authentication.framework.store.SessionDataStore} - Error while storing session data
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'SESSION_OBJECT' at row 1
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3971)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3909)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:2527)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2680)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2487)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:1858)
    at com.mysql.jdbc.PreparedStatement.executeUpdateInternal(PreparedStatement.java:2079)
    at com.mysql.jdbc.PreparedStatement.executeUpdateInternal(PreparedStatement.java:2013)
    at com.mysql.jdbc.PreparedStatement.executeLargeUpdate(PreparedStatement.java:5104)
    at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:1998)
    at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
    at java.base/java.lang.reflect.Method.invoke(Method.java:580)
    at org.apache.tomcat.jdbc.pool.StatementFacade$StatementProxy.invoke(StatementFacade.java:118)
    at jdk.proxy11/jdk.proxy11.$Proxy64.executeUpdate(Unknown Source)
    at org.wso2.carbon.identity.application.authentication.framework.store.SessionDataStore.persistSessionData(SessionDataStore.java:890)
    at org.wso2.carbon.identity.application.authentication.framework.store.SessionDataStore.storeSessionData(SessionDataStore.java:610)
    at org.wso2.carbon.identity.application.authentication.framework.cache.AuthenticationContextCache.persistSessionData(AuthenticationContextCache.java:208)
    at org.wso2.carbon.identity.application.authentication.framework.cache.AuthenticationContextCache.addToCache(AuthenticationContextCache.java:86)
    at org.wso2.carbon.identity.application.authentication.framework.util.FrameworkUtils.addAuthenticationContextToCache(FrameworkUtils.java:1263)
    at org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultRequestCoordinator.handle(DefaultRequestCoordinator.java:603)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doPost(CommonAuthenticationHandler.java:59)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doGet(CommonAuthenticationHandler.java:48)
    at org.wso2.carbon.identity.oauth.endpoint.util.AuthzUtil.handleAuthFlowThroughFramework(AuthzUtil.java:4443)
    at org.wso2.carbon.identity.oauth.endpoint.util.AuthzUtil.handleInitialAuthorizationRequest(AuthzUtil.java:1720)
    at org.wso2.carbon.identity.oauth.endpoint.authz.OAuth2AuthzEndpoint.authorize(OAuth2AuthzEndpoint.java:138)
    ...
    at java.base/java.lang.Thread.run(Thread.java:1583)

Please select the area issue is related to

API Access Mgt & Authorization

Version

7.3.0

Environment Details (with versions)

No response

Developer Checklist

• [Behavioural Change] Does this change introduce a behavioral change to the product?
•  ↳ Approved by team lead
•  ↳ Label impact/behavioral-change added
• [Migration Impact] Does this change have a migration impact?
•  ↳ Migration label added (e.g., 7.2.0-migration)
•  ↳ Migration issues created and linked
• [New Configuration] Does this change introduce a new configuration?
•  ↳ Label config added
•  ↳ Configuration is properly documented

[manuth07]

Hi @wso2/api-access-mgt-authorization team, I would like to work on fixing this issue. Could you please assign it to me?

[inthirakumaaran]

@manuth07 Thanks for raising the PR! We’ll review the changes and merge it once everything looks good.

[manuth07]

Thankyou! Happy to help. Let me know if you need any changes before merging