Add check for requested token type

Author: collado-mike

service/common/src/main/java/org/apache/polaris/service/auth/JWTBroker.java

@@ -103,6 +103,9 @@ public TokenResponse generateFromToken(
       String grantType,
       String scope,
       TokenType requestedTokenType) {
+    if (!TokenType.ACCESS_TOKEN.equals(requestedTokenType)) {
+      return new TokenResponse(OAuthTokenErrorResponse.Error.invalid_request);
+    }
     if (!TokenType.ACCESS_TOKEN.equals(subjectTokenType)) {
       return new TokenResponse(OAuthTokenErrorResponse.Error.invalid_request);
     }