From a82365b5dfb2caa4fee703b9136843c0ade9f5e9 Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Mon, 22 Dec 2025 15:29:28 -0500
Subject: [PATCH] PM-30125 - IdentityTokenResponse - mark fields as deprecated
 (#6773)

---
 .../IdentityServer/RequestValidators/BaseRequestValidator.cs    | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
index 0bdf1d89c2..e07446d49f 100644
--- a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
+++ b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
@@ -659,6 +659,7 @@ public abstract class BaseRequestValidator<T> where T : class
         var customResponse = new Dictionary<string, object>();
         if (!string.IsNullOrWhiteSpace(user.PrivateKey))
         {
+            // PrivateKey usage is now deprecated in favor of AccountKeys
             customResponse.Add("PrivateKey", user.PrivateKey);
             var accountKeys = await _accountKeysQuery.Run(user);
             customResponse.Add("AccountKeys", new PrivateKeysResponseModel(accountKeys));
@@ -666,6 +667,7 @@ public abstract class BaseRequestValidator<T> where T : class
 
         if (!string.IsNullOrWhiteSpace(user.Key))
         {
+            // Key is deprecated in favor of UserDecryptionOptions.MasterPasswordUnlock.MasterKeyEncryptedUserKey
             customResponse.Add("Key", user.Key);
         }