-
Notifications
You must be signed in to change notification settings - Fork 75
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(jans-auth-server): add scope online_access to issue session bound refresh token #3012
Labels
comp-jans-auth-server
Component affected by issue or PR
enhancement
kind-feature
Issue or PR is a new feature request
Milestone
Comments
yuriyz
changed the title
Add scope online_access to issue session bound refresh token
feat(jans-auth-server): add scope online_access to issue session bound refresh token
Nov 16, 2022
Merged
3 tasks
yuriyz
added a commit
that referenced
this issue
Mar 10, 2023
yuriyz
added a commit
that referenced
this issue
Mar 10, 2023
This was referenced Mar 16, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
comp-jans-auth-server
Component affected by issue or PR
enhancement
kind-feature
Issue or PR is a new feature request
Currently the
offline_access
scope can control whether to issue a refresh token to a client. But this refresh token is long lived.This proposal is to introduce another scope called
online_access
for SPA's to request a refresh token, with the behavior that this refresh token should expire when the session ends (for example via front channel logout).The text was updated successfully, but these errors were encountered: