Repository navigation
StandardTokenExchange and scope=offline_access #44748
Unanswered
tututicelli-p
asked this question in
Q&A
Replies: 1 comment
|
any updates on this? |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi
With Keycloak 26.2, the StandardTokenExchange has been introduced
In the Legacy implementation, it was possible to exchange an access token for an offline token by specifying scope = offline_access. With the StandardTokenExchange, this no longer works due to this change: #37115.
What kind of security issue did you encounter with this feature that required its removal ?
Another question : In which version of Keycloak will the Legacy Token Exchange be removed ?
Best Regards,
All reactions