@anchrd/intel-api 0.6.5 → 0.6.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -136,7 +136,12 @@ export function createOpenId(deps) {
|
|
|
136
136
|
client_name: input.clientName,
|
|
137
137
|
redirect_uris: [input.redirectUri],
|
|
138
138
|
response_types: ["code"],
|
|
139
|
-
|
|
139
|
+
// ⚠️ `refresh_token` belongs here, not only in the scope. RFC 7591 §2: `grant_types`
|
|
140
|
+
// declares which grants this client may USE, and a client registered without it may
|
|
141
|
+
// not refresh — whatever scope it was granted. That is why the portal connection did
|
|
142
|
+
// not survive its first access token (#97): `offline_access` was being requested and
|
|
143
|
+
// the right to act on it never was.
|
|
144
|
+
grant_types: ["authorization_code", "refresh_token"],
|
|
140
145
|
...(isCloudflareAccess(input.issuer)
|
|
141
146
|
? {}
|
|
142
147
|
: { scope: "openid profile email offline_access" }),
|