fix(endpoint-auth): exclude client_id from introspection response

paulrobertlloyd · paulrobertlloyd · commit 53d6eaec29fa · 2024-08-25T22:38:17.000+01:00
diff --git a/packages/endpoint-auth/lib/controllers/introspection.js b/packages/endpoint-auth/lib/controllers/introspection.js
@@ -10,7 +10,6 @@ export const introspectionController = {
    */
   post(request, response) {
     try {
-      const { application } = request.app.locals;
       let { token } = request.body;
 
       if (!token) {
@@ -21,7 +20,6 @@ export const introspectionController = {
       let accessToken = verifyToken(token);
       accessToken = {
         active: true,
-        client_id: application.url,
         ...accessToken,
       };
 
