Timeline for Should I use separate OIDC clients for RFC-8252 (OIDC w/ PKCE) client and my HTTP API?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 26, 2023 at 22:44 | vote | accept | Jon Wolski | ||
| Sep 25, 2023 at 13:30 | answer | added | defalt | timeline score: 1 | |
| Sep 19, 2023 at 21:09 | comment | added | defalt |
Multiple audience can exist for an access token. Create an optional scope for your desktop client and configure an Audience mapper to add client ID of the web service as an audience in that scope. When your desktop app makes authorization request, specify this optional scope. Then the access token will have both the client IDs in aud claim.
|
|
| Sep 19, 2023 at 19:17 | history | asked | Jon Wolski | CC BY-SA 4.0 |