@PostMapping({
        '/' + OidcConstants.BASE_OIDC_URL + '/' + OAuth20Constants.ACCESS_TOKEN_URL,
        '/' + OidcConstants.BASE_OIDC_URL + '/' + OAuth20Constants.TOKEN_URL,
        "/**/" + OidcConstants.ACCESS_TOKEN_URL,
        "/**/" + OidcConstants.TOKEN_URL
    })
    @Operation(summary = "Handle OIDC access token request")
    @Override
    public ModelAndView handleRequest(final HttpServletRequest request, final HttpServletResponse response) throws Exception {
        val webContext = new JEEContext(request, response);
        val issuerService = getConfigurationContext().getIssuerService();
        if (!issuerService.validateIssuer(webContext, List.of(OAuth20Constants.ACCESS_TOKEN_URL, OAuth20Constants.TOKEN_URL,
            OidcConstants.ACCESS_TOKEN_URL, OidcConstants.TOKEN_URL))) {
            return OAuth20Utils.writeError(response, OAuth20Constants.INVALID_REQUEST, "Invalid issuer");
        }
        return super.handleRequest(request, response);
    }
This is {@link OidcAccessTokenEndpointController}.

@author Misagh Moayyed
@since 5.0.0
support/cas-server-support-oidc-core-api/src/main/java/org/apereo/cas/oidc/web/controllers/token/OidcAccessTokenEndpointController.java