Sometimes when an application is registered, the parti that register the application in the OAuth server needs to associate specific state with it.
For example a company, that issues a clientId and a client secret to a customer might need to map a token fetcheed using those credentials to an internal ID.
The propesed solution works as follows:
Create a new application supplying an attribute "application_details" to POST /oauth20/applications. It's a JSON object.
When you validate a token issued against the clieentId/client secred of the application, the object you supplied when creating the application, will be returned back to you.
Sometimes when an application is registered, the parti that register the application in the OAuth server needs to associate specific state with it. For example a company, that issues a clientId and a client secret to a customer might need to map a token fetcheed using those credentials to an internal ID. The propesed solution works as follows: