You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We should allow Session Tokens to be exchanged for OAuth / OIDC tokens on the Token Exchange. This would give developers the opportunity to get an access_token from a session token, without the need of going though the complete OAuth Code Flow.
Open Questions
How to handle scope, audience, ..., resp. do we need any restrictions?
...
The text was updated successfully, but these errors were encountered:
We should allow Session Tokens to be exchanged for OAuth / OIDC tokens on the Token Exchange. This would give developers the opportunity to get an access_token from a session token, without the need of going though the complete OAuth Code Flow.
Open Questions
The text was updated successfully, but these errors were encountered: