From 7085b953b615ca1032b730005ef5614133fa943c Mon Sep 17 00:00:00 2001
From: Ireneusz Kawalec <ireneusz.kawalec@gmail.com>
Date: Sat, 15 Nov 2025 19:24:23 +0100
Subject: [PATCH] pass rar if provided in client credentials flow

---
 internal/oauth2/oauth2.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/internal/oauth2/oauth2.go b/internal/oauth2/oauth2.go
index 46cf955..37e9ea5 100644
--- a/internal/oauth2/oauth2.go
+++ b/internal/oauth2/oauth2.go
@@ -464,6 +464,10 @@ func RequestToken(
 		if len(cconfig.Audience) > 0 {
 			request.Form.Set("audience", strings.Join(cconfig.Audience, " "))
 		}
+
+		if len(cconfig.RAR) > 0 {
+			request.Form.Set("authorization_details", cconfig.RAR)
+		}
 	}
 
 	switch cconfig.GrantType {