2022-02-20

Request a second Access token with different claims post login

What is the correct method of requesting a second access token (WITH DIFFERENT SCOPES) when the user has logged in with Auth PKCE flow.

Presuming the auth_code returned in the initial flow has expired.

From my understanding

We could recall the authorisation PKCE flow with different scopes which would then give the RP back a code that could be exchanged for the appropriate access token



from Recent Questions - Stack Overflow https://ift.tt/kwltsXT
https://ift.tt/FXHnecp

No comments:

Post a Comment