package org.apereo.cas.oidc.services;

import org.apereo.cas.services.DefaultServicesManagerRegisteredServiceLocator;
import org.apereo.cas.services.OidcRegisteredService;
import org.apereo.cas.support.oauth.OAuth20Constants;
import org.apereo.cas.util.CollectionUtils;

import lombok.extern.slf4j.Slf4j;
import lombok.val;
import org.springframework.core.Ordered;

/**
 * This is {@link OidcServicesManagerRegisteredServiceLocator}.
 *
 * @author Misagh Moayyed
 * @since 6.3.0
 */
@Slf4j
public class OidcServicesManagerRegisteredServiceLocator extends DefaultServicesManagerRegisteredServiceLocator {
    public OidcServicesManagerRegisteredServiceLocator() {
        setOrder(Ordered.HIGHEST_PRECEDENCE);
        setRegisteredServiceFilter(
            (registeredService, service) -> {
                var match = service.getAttributes().containsKey(OAuth20Constants.CLIENT_ID)
                    && registeredService instanceof OidcRegisteredService;
                if (match) {
                    val oidcService = (OidcRegisteredService) registeredService;
                    LOGGER.trace("Attempting to locate service [{}] via [{}]", service, oidcService);
                    match = CollectionUtils.firstElement(service.getAttributes().get(OAuth20Constants.CLIENT_ID))
                        .map(Object::toString)
                        .stream()
                        .anyMatch(clientId -> oidcService.getClientId().equalsIgnoreCase(clientId));
                }
                return match;
            });
    }
}


@@ -699,16 +699,20 @@
 ECEDENCE
+ + 1
 );%0A     

allow oidc service locator to run after oauth and other locators