You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Should the AS always return the "resources" structure to the RC in the token structure response? This is currently "RECOMMENDED" with little guidance as to when to return it or not.
It seems like it could be made required without placing additional burden on the client.
Related: the continuation access token uses the same structure but doesn't have "access" because it's a limited use token already. Should we define a "type" for continuation access tokens in GNAP and use it here? Strawman:
type: https://url-of-gnap-RFC/
actions: continue
locations: grant API URI
Downside? It's always going to be the same, so it might get ignored like "token_type: bearer" is ignored by OAuth clients.
Should the AS always return the "resources" structure to the RC in the token structure response? This is currently "RECOMMENDED" with little guidance as to when to return it or not.
It seems like it could be made required without placing additional burden on the client.
Originally posted by @yaronf in #136 (comment)
The text was updated successfully, but these errors were encountered: