Only revalidate ID tokens if provided on refresh

puppetlabs / vault-plugin-secrets-oauthapp

OAuth 2.0 secrets plugin for HashiCorp Vault supporting a variety of grant types

Apache License 2.0

94 stars 11 forks source link

Closed impl closed 3 years ago

impl commented 3 years ago

This change passes through original ID tokens and claims unmodified if the refresh does not provide an ID token in the response. /cc @DrDaveD