Use per client usage rules

src/oidcendpoint/authz/__init__.py

@@ -27,6 +27,9 @@ def usage_rules(self, client_id):
         else:
             _usage_rules = {}
 
+        if not client_id:
+            return _usage_rules
+
         try:
             _per_client = self.endpoint_context.cdb[client_id]["token_usage_rules"]
         except KeyError:
@@ -52,8 +55,12 @@ def usage_rules_for(self, client_id, token_type):
         except KeyError:
             return {}
 
-    def __call__(self, session_id: str, request: Union[dict, Message],
-                 resources: Optional[list] = None) -> Grant:
+    def __call__(
+        self,
+        session_id: str,
+        request: Union[dict, Message],
+        resources: Optional[list] = None,
+    ) -> Grant:
         args = self.grant_config.copy()
 
         scope = request.get("scope")
@@ -74,6 +81,8 @@ def __call__(self, session_id: str, request: Union[dict, Message],
         for key, val in args.items():
             if key == "expires_in":
                 grant.set_expires_at(val)
+            if key == "usage_rules":
+                setattr(grant, key, self.usage_rules(request.get("client_id")))
             else:
                 setattr(grant, key, val)