Valerio Vaudi
Valerio Vaudi
remove roles in client app
The idea is to fire some event to the client application to let know to the app that the token should be refreshed
Client application should use scope
some time we need for legacy implementation to enable password grant flow in order to make VAuthenticator OAuth2 retro compatible
we would like to control to insert user roles and groups in: - access_token - id_token - userinfo making customizable the claim name
some time we would like to remove or add role to a specific user for testing/suspicius action prevention purpose
we need to give the possibility to the user to use a software authenticator like Google, Microsoft and so on to configure OTP token generation.