Open wwadge opened 2 years ago
Example of what refresh token would then look like (note typ: Offline):
"iat": 1649022600,
"jti": "29384cc...",
"iss": "https://login.planetwatch.io/auth/realms/Planetwatch",
"aud": "https://login.planetwatch.io/auth/realms/Planetwatch",
"sub": "e2bc9d6...",
"typ": "Offline",
"azp": "external-login",
"nonce": "eb655f31-4113-4...",
"session_state": "e1bf52a6-...",
"scope": "openid profile offline_access email",
"sid": "e1bf52a6-..."
}```
Tested locally with this change and looks good.
Ask for the offline_access scope to get non-expiring tokens back from Keycloak server