These settings are used successfully for the initial login handshake and I'm able to see them in the URLs. Login is working properly.
I'm now trying to test silent renew. Before the expires_at time is reached, I'm seeing some network traffic in my browser starting with this GET request:
I'm trying to understand why the silent renew callback URL has the error=login_required hash. The one thing that caught my eye is that the silent renew request does not contain the full list of response_type and scope values. Why is that?
I've defined the following settings for my UserManager:
These settings are used successfully for the initial login handshake and I'm able to see them in the URLs. Login is working properly.
I'm now trying to test silent renew. Before the
expires_at
time is reached, I'm seeing some network traffic in my browser starting with this GET request:I get a 302 response for this request with the following location header:
I'm trying to understand why the silent renew callback URL has the
error=login_required
hash. The one thing that caught my eye is that the silent renew request does not contain the full list ofresponse_type
andscope
values. Why is that?