mozilla-iam / mozilla.oidc.accessproxy

Stand-alone OIDC Access Proxy
Mozilla Public License 2.0
12 stars 10 forks source link

currently the access proxy can renew access_tokens, but not with a refresh token #15

Closed gdestuynder closed 6 years ago

gdestuynder commented 6 years ago

I believe the library doesnt really support this at this time. it does support renewing access tokens though.

this would be useful when the access provider does not allow renewing access token with .. an access token, and when the RP using the proxy does not want to use the "session refresh" feature (which 302 the web browser for a prompt=none/silent authentication check)

Note that this is my least prefered solution, as the refresh tokens are access tokens that effectively last forever, but sometimes this is the only option supported by the OIDC OP (eg: auth0 does not let you refresh an access token with a regular access token)