(de)serialize values for refresh tokens

labd / node-federated-token

Tokens for federated services

MIT License

1 stars 0 forks source link

(de)serialize values for refresh tokens #29

Closed korsvanloon closed 3 months ago

korsvanloon commented 6 months ago

When you have a federated token that contains values, the values got lost after refreshing.

This was especially a problem in systems that use values for specific logic. For instance, using anonymous queries or authenticated queries based on an anonymous value. The access token might be created for an authenticated user, but then after the refresh, the system thought it would be an anonymous token because the value was lost.

mvantellingen commented 6 months ago

Perhaps also good to outline in the PR description what this PR fixes.