Refresh token management on the identity-facade reference

[PratMoha]

618

Description

Added support for Refresh token management on the identity-facade reference flow.

• Enhanced the conditions, and added policies for refresh token generation, set/extract token attributes, assign message request for refresh token generation.

• Added RFCCompliantRequestResponse to the token generation policy for compatibility with external OAuth plugins.

  • Error and non-error responses will include the HTTP Cache-Control response header field to comply with [RFC2616]
  • The expires_in property will be in alpha-numeric format. For consistency, the refresh_token_expires_in will also be alpha-numeric.
  • OAuthV2 responses for token generation, will include the RFC-compliant Bearer header field instead of BearerToken.
  • Error messages in response payloads will be of the format: {"error" : "xxx", "error_description" :"yyy"} for refresh token errors.

Issues Fixed

• Fixes #618

Housekeeping

(please check all that apply [x], do not edit the text)

• [x] I have run all the tests locally and they all pass.
• [x] I have followed the relevant style guide for my changes.

Full Repo Validation Required

(please check all that apply [x], do not edit the text)

• [ ] PR requires full pipeline run (Run for changes only by default).

CC: @apigee-devrel-reviewers

[google-cla[bot]]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[danistrebel]

/gcbrun

[apigee-devrel-bot]

Pipeline Report

Pipeline	Result	Elapsed Wall Time
/workspace/references/auth-schemes	pass	105s
/workspace/tools/apigee-x-trial-provision	pass	500s
/workspace/references/cicd-pipeline	pass	482s
/workspace/references/cicd-sharedflow-pipeline	pass	232s
/workspace/references/cloud-logging-shared-flow	pass	151s
/workspace/references/cloud-run	pass	220s
/workspace/references/common-shared-flows	pass	0s
/workspace/references/data-api	pass	88s
/workspace/references/data-converters-shared-flow	pass	98s
/workspace/references/dutch-healthcare	pass	320s
/workspace/tools/hybrid-quickstart	pass	1854s
/workspace/references/firestore-facade	pass	268s
/workspace/references/gcp-sa-auth-shared-flow	pass	163s
/workspace/references/identity-facade	pass	253s
/workspace/references/java-callout	pass	107s
/workspace/references/js-callout	pass	117s
/workspace/references/oauth-admin-api	pass	82s
/workspace/references/oidc-mock	pass	14s
/workspace/references/product-recommendations	pass	196s
/workspace/references/proxy-template	pass	317s
/workspace/references/recaptcha-enterprise	pass	209s
/workspace/references/southbound-mtls	pass	116s
/workspace/references/threat-protect	pass	106s
/workspace/labs/bdd-proxy-development	pass	0s
/workspace/labs/best-practices-hackathon	pass	0s
/workspace/labs/eventarc-apihub	pass	0s
/workspace/labs/idp-okta-integration	pass	0s
/workspace/tools/apigee-envoy-quickstart	pass	368s
/workspace/tools/apigee-openlegacy	pass	0s
/workspace/tools/apigee-sackmesser	pass	433s
/workspace/tools/decrypt-hybrid-assets	pass	0s
/workspace/tools/endpoints-oas-importer	pass	170s
/workspace/tools/oas-apigee-mock	pass	28s
/workspace/tools/pipeline-linter	pass	0s
/workspace/tools/pipeline-runner	pass	0s
/workspace/tools/proxy-endpoint-unifier	pass	9s
/workspace/tools/sf-dependency-list	pass	2s
/workspace/tools/target-server-validator	pass	190s
TOTAL PIPELINE	pass	4844s

View details in Cloud Build (permission required)

Commit version: 94e6d6b

[JoelGauci]

/gcbrun

[apigee-devrel-bot]

Pipeline Report

Pipeline	Result	Elapsed Wall Time
references/identity-facade	pass	270s
TOTAL PIPELINE	pass	270s

View details in Cloud Build (permission required)

Commit version: 94e6d6b