Merge branch 'hotfix/invalid_access_type' into hotfix/21.1.5

Author: cslzchen

src/main/java/org/apereo/cas/support/oauth/web/endpoints/OAuth20AuthorizeEndpointController.java

@@ -245,11 +245,14 @@ protected ModelAndView buildAuthorizationForRequest (
                 .map(String::valueOf)
                 .orElseGet(OAuth20GrantTypes.AUTHORIZATION_CODE::getType)
                 .toUpperCase();
-        val accessType = context
+        var accessType = context
                 .getRequestParameter(OsfCasOAuth20Constants.ACCESS_TYPE)
                 .map(String::valueOf)
-                .orElse(OsfCasOAuth20CodeType.ONLINE.name())
+                .orElse(StringUtils.EMPTY)
                 .toUpperCase();
+        if (!OsfCasOAuth20CodeType.OFFLINE.name().equalsIgnoreCase(accessType)) {
+            accessType = OsfCasOAuth20CodeType.ONLINE.name();
+        }
         val scopes = OAuth20Utils.parseRequestScopes(context);
         val codeChallenge = context
                 .getRequestParameter(OAuth20Constants.CODE_CHALLENGE)