Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(jans-auth-server): add scope online_access to issue session bound refresh token #3012

Closed
nynymike opened this issue Nov 16, 2022 · 0 comments · Fixed by #4106
Closed
Assignees
Labels
comp-jans-auth-server Component affected by issue or PR enhancement kind-feature Issue or PR is a new feature request
Milestone

Comments

@nynymike
Copy link
Contributor

nynymike commented Nov 16, 2022

Currently the offline_access scope can control whether to issue a refresh token to a client. But this refresh token is long lived.

This proposal is to introduce another scope called online_access for SPA's to request a refresh token, with the behavior that this refresh token should expire when the session ends (for example via front channel logout).

@yuriyz yuriyz changed the title Add scope online_access to issue session bound refresh token feat(jans-auth-server): add scope online_access to issue session bound refresh token Nov 16, 2022
@yuriyz yuriyz assigned yuriyz and unassigned moabu Nov 16, 2022
@yuriyz yuriyz added this to the 1.0.5 milestone Nov 16, 2022
@yuriyz yuriyz added the comp-jans-auth-server Component affected by issue or PR label Nov 16, 2022
@mo-auto mo-auto added the kind-feature Issue or PR is a new feature request label Nov 16, 2022
@moabu moabu modified the milestones: 1.0.5, 1.0.6 Dec 1, 2022
@moabu moabu modified the milestones: 1.0.6, 1.0.7 Jan 9, 2023
@moabu moabu modified the milestones: 1.0.7, 1.0.9 Mar 1, 2023
@moabu moabu modified the milestones: 1.0.9, 1.0.10 Mar 9, 2023
yuriyz added a commit that referenced this issue Mar 9, 2023
yuriyz added a commit that referenced this issue Mar 10, 2023
…und refresh token #3012 (#4106)

* feat(jans-auth-server): added online_access scope to issue session bound refresh token #3012

* feat(jans-auth-server): added test for online_access scope implementation #3012

* feat(jans-auth-server): added doc about online_access scope #3012
iromli added a commit that referenced this issue Mar 13, 2023
…ble agama engine by default

Overview:

- add online_access scope #3012
- enable agama engine by default #4130
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp-jans-auth-server Component affected by issue or PR enhancement kind-feature Issue or PR is a new feature request
Projects
None yet
4 participants