OIDC forcing access_token #838
Unanswered
mdelnegro-lennd
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I have a specific customer that only returns
id_tokenand does not provideaccess_tokennoruserinfo_endpoint, I think they pretend to only use theid_tokento authenticate with our app. I see the framework forces the IDP to returnaccess_tokenanduserinfo_endpoint. Is this a valid scenario? I was reading the documentation about OIDC and it says theaccess_tokenmay be optional, which also invalidates the usage ofuserinfo_endpoint. Any help is appreciated.All reactions