Unable to revoke tokens when Multiple Active Access Tokens are enabled

[charithjayasanka]

Description

Unable to revoke tokens when Multiple Active Access Tokens are enabled as described in [1].

Expected behavior:
The token binding validation should succeed, and the userinfo API (or any other API) should function correctly. A separate token binder should be implemented if there is a valid requirement to validate the request binding type.

https://apim.docs.wso2.com/en/3.2.0/learn/api-security/oauth2/multiple-active-access-tokens/#jwt

Steps to Reproduce

How to reproduce:

1. Add the configuration below.

[oauth.jwt.renew_token_without_revoking_existing]
enable = true
allowed_grant_types = ["client_credentials", "authorization_code"]

2. Enable "Validate token binding" on the service provider configurations.
3. Obtain an access token using authorization_code grant type and invoke userinfo endpoint using the obtained access token.
   It will return the following error.

{
    "error_description": "Valid token binding value not present in the request.",
    "error": "invalid_request"
}

Version

3.2.1

Environment Details (with versions)

No response