diff --git a/pom.xml b/pom.xml
index a52c79e5..426c4ef5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -50,7 +50,7 @@
6.2.0.Final
2.7.8
5.1.0
- 2.12.4
+ 2.13.4.1
1.10
2.2.9.RELEASE
1.12.40
diff --git a/zlt-demo/sso-demo/oidc-sso/README.md b/zlt-demo/sso-demo/oidc-sso/README.md
index 672698d8..11116508 100644
--- a/zlt-demo/sso-demo/oidc-sso/README.md
+++ b/zlt-demo/sso-demo/oidc-sso/README.md
@@ -11,6 +11,7 @@ alter table oauth_client_details add support_id_token tinyint(1) DEFAULT 1 COMME
alter table oauth_client_details add id_token_validity int(11) DEFAULT 60 COMMENT 'id_token有效期';
update oauth_client_details set additional_information = '{"LOGOUT_NOTIFY_URL_LIST":"http://127.0.0.1:8082/logoutNotify"}'
+ , web_server_redirect_uri = 'http://127.0.0.1:8082/callback.html'
where client_id = 'webApp';
```
diff --git a/zlt-demo/sso-demo/oidc-sso/src/main/java/com/sso/demo/controller/ApiController.java b/zlt-demo/sso-demo/oidc-sso/src/main/java/com/sso/demo/controller/ApiController.java
index 74103b05..72e3ff03 100644
--- a/zlt-demo/sso-demo/oidc-sso/src/main/java/com/sso/demo/controller/ApiController.java
+++ b/zlt-demo/sso-demo/oidc-sso/src/main/java/com/sso/demo/controller/ApiController.java
@@ -50,6 +50,9 @@ public class ApiController {
@Value("${zlt.sso.redirect-uri:}")
private String redirectUri;
+ @Value("${zlt.sso.scope:}")
+ private String scope;
+
@Value("${zlt.sso.access-token-uri:}")
private String accessTokenUri;
@@ -146,7 +149,7 @@ public Map getAccessToken(String code) {
param.add("code", code);
param.add("grant_type", "authorization_code");
param.add("redirect_uri", redirectUri);
- param.add("scope", "all");
+ param.add("scope", scope);
param.add("nonce", this.genNonce());
HttpEntity> request = new HttpEntity<>(param, headers);
ResponseEntity