Request a second Access token with different claims post login
What is the correct method of requesting a second access token (WITH DIFFERENT SCOPES) when the user has logged in with Auth PKCE flow.
Presuming the auth_code returned in the initial flow has expired.
From my understanding
We could recall the authorisation PKCE flow with different scopes which would then give the RP back a code that could be exchanged for the appropriate access token
from Recent Questions - Stack Overflow https://ift.tt/kwltsXT
https://ift.tt/FXHnecp
Comments
Post a Comment