Inherit parent user domain in shared token revoke flow

[HasiniSama]

Proposed changes in this pull request

Purpose

When revoking an access token in a shared user flow, the authorized user's User Store Domain is set to the shared user's domain. Therefore, when retrieving the clientIDs from here, it will only retrieve the clientIDs associated with the shared user's User Store Domain.

However, when creating access tokens for shared users the User Store Domain of the parent user is used here and here. Hence these tokens are not getting revoked.

Approach

Hence the access token revoke logic for shared user flow has to be improved to handle the user's domain correctly which will eventually detect all the clientIDs issued.

This is an alternative approach to the fix wso2-extensions/identity-oauth2-grant-organization-switch#38. In which we amend the user store domain when the token is issued. Which would lead to user store mismatch between the token and the actual user. Here, we change the logic in the token revoke method.

Tested Flows (Unit test added to each)

Scenario	User Domain	Authz User	Tenant	Authorized Organization	Grant Type	IDP_ID
Initial login with no switch	Primary	Username	-1234	NONE	authorization_code	1
Switch to OrgID_01	Primary	Username	-1234	OrgID_01	organization_switch	1
Switch to OrgID_02	Primary	Username	-1234	OrgID_02	organization_switch	1
Initial login with no switch	Secondary	Username	-1234	NONE	authorization_code	1
Switch to OrgID_01	Secondary	Username	-1234	OrgID_01	organization_switch	1
Switch to OrgID_02	Secondary	Username	-1234	OrgID_02	organization_switch	1
SSO login to OrgID_01	Primary*	Username	33	NONE	authorization_code	33
SSO login to OrgID_01	Federated	User ID	33	OrgID_01	authorization_code	3
Switch to OrgID_02 after SSO	Federated	User ID	33	OrgID_02	organization_switch	3
Federated login without JIT	Federated	Federated Username	-1234	NONE	authorization_code	38
JIT provisioned Federated login	Secondary	JIT given Username	-1234	NONE	authorization_code	1

*The access token issued by the shared application to the parent application. This doesn't get deleted from the database when the user logs out.

[codecov]

Codecov Report

Attention: Patch coverage is 77.77778% with 4 lines in your changes missing coverage. Please review.

Project coverage is 55.69%. Comparing base (32cb723) to head (23ff236).

Files with missing lines	Patch %	Lines
...java/org/wso2/carbon/identity/oauth/OAuthUtil.java	77.77%	3 Missing and 1 partial ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #2664      +/-   ##
============================================
+ Coverage     55.66%   55.69%   +0.02%     
+ Complexity     8435     8317     -118     
============================================
  Files           632      632              
  Lines         48587    48605      +18     
  Branches       9300     9299       -1     
============================================
+ Hits          27048    27072      +24     
+ Misses        17670    17658      -12     
- Partials       3869     3875       +6     

Flag	Coverage Δ
unit	39.03% <77.77%> (+0.05%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/12688880386

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/12688880386
Status: failure

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/12703591457

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/12703591457
Status: failure

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/12802533205

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/12802533205
Status: failure

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/12826300018

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/12826300018
Status: success

[jenkins-is-staging]

Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/12826300018