pilcrowonpaper / oslo

A collection of auth-related utilities
https://oslo.js.org
MIT License
1.06k stars 35 forks source link

Support scopes when refreshing token #18

Closed LinusOP closed 9 months ago

LinusOP commented 9 months ago

According to the OAuth2 specification a call to the token endpoint with the refresh_token grant type can optionally accept scopes. Oslos OAuth2 client implementation does not currently support sending scopes in its refreshAccessToken function.

Relevant spec: https://datatracker.ietf.org/doc/html/rfc6749#section-6