search

ncsa / oa4mp

Open Authorization for MyProxy
https://oa4mp.org/
Other
8 stars 10 forks source link

add at_sub as parameter for client credentials flow #220

Open jjg-123 opened 1 week ago

jjg-123 commented 1 week ago

In the client credentials flow, it is possible that the sub for the access token is different than the sub for the id token, but there is really no good way to specify this. We allow for a sub parameter in the request, and should add an at_sub parameter for access tokens. Now the AT subject has to be set by a QDL script.

jjg-123 commented 3 days ago

Maybe... This can easily be done with a little QDL script, so overloading the request is probably just sugar coating it.