search

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
https://www.appsmith.com
Apache License 2.0
32.87k stars 3.58k forks source link

[Feature]: Choose which token to use in Oauth 2.0 flow #33219

Open jwsloan opened 3 months ago

jwsloan commented 3 months ago

Is there an existing issue for this?

Summary

AWS Cognito recommends using the IdToken returned during the Oauth 2.0 flow. Appsmith assumes the AccessToken is what is needed, and automatically chooses it.

Apps like Postman give provide a config option in the OAuth setup to state which token should be used for authentication. It would be good if Appsmith did the same.

Why should this be worked on?

AWS Cognito is a common authentication provider, and anyone who follows their recommendation of using IdToken instead of AccessToken will run into this issue.

Nikhil-Nandagopal commented 3 months ago

@jwsloan can you share a screenshot of where postman allows you to do this?