Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
oauth2 flow_refresh: Use granted scope parameters in token refresh
Fixing the OAuth2 token refresh handler to: - Read and use the optional 'scope' form parameter, if present. - Otherwise default to requesting the originally granted scopes. This endpoint should be completely agnostic of: - The originally **requested** scopes - The **client scopes** (both current and past client scopes) Fixes #696
- Loading branch information