[JIRA] (JOIDC-150) Improve configuration for the refresh token issuance

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/JOIDC-150?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 ) JOIDC-150 ( https://shibboleth.atlassian.net/browse/JOIDC-150?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 ) Improve configuration for the refresh token issuance ( https://shibboleth.atlassian.net/browse/JOIDC-150?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 )

Issue Type: Improvement Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Token Endpoint Created: 07/Apr/23 8:59 AM Priority: Trivial Reporter: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd )

The current refresh token issuance logic is requiring use of the *offline_access* scope defined in the OIDC core specification [1]. The current code also requires that either *authorization_code* or *refresh_token* grant is used.

This fits the OIDC use cases, but we should investigate if the logic could be improved in order to serve generic OAuth2 clients better. At least provide means to customize the logic.

[1] https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess

( https://shibboleth.atlassian.net/browse/JOIDC-150#add-comment?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-150#add-comment?atlOrigin=eyJpIjoiMTQ1MzYyZDQ4YTFhNGYzMmE5YzkyYWZjNTExYzJiZGEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100221- sha1:916089c )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230407/e380f74c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-eae79da1-0ee0-4405-9aac-502be5605450
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230407/e380f74c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-5738fa69-df30-4393-998d-a6507e48c6a9
Type: image/png
Size: 448 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230407/e380f74c/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-7248116f-8b4c-4ca0-943b-ede72497c449
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230407/e380f74c/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-47444d67-2447-4a8d-ad17-b4294918d3d1
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230407/e380f74c/attachment-0007.png>