Skip to content

Add custom or generic request validator for refresh token grant #1941

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
anekar422221 opened this issue Mar 20, 2025 · 0 comments
Open

Add custom or generic request validator for refresh token grant #1941

anekar422221 opened this issue Mar 20, 2025 · 0 comments
Labels
type: enhancement A general enhancement
Milestone

Comments

@anekar422221
Copy link

Expected Behavior
Similar to OAuth2ClientCredentialsAuthenticationValidator there should be a validator for Refresh token grant

Current Behavior
Currently there is no support for validating the request parameters for the RefreshToken grant.

Context
In our particular use case, I would like to validate the scopes that are passed in the request as params, against the registered client's scopes during the flow.

Not only scopes, we also want to validate several other request params which are needed for our use-cases like - validating the tenant information of refresh token so that I can prevent cross-tenant refresh token exchange.
That is the reason I am looking for a request validator similar to what you have shared above.

@anekar422221 anekar422221 added the type: enhancement A general enhancement label Mar 20, 2025
@jgrandja jgrandja changed the title Add custom or generic request validator for refresh token grant & other grant Add custom or generic request validator for refresh token grant Mar 21, 2025
@jgrandja jgrandja added this to the 2.0.x milestone Apr 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: enhancement A general enhancement
Projects
None yet
Development

No branches or pull requests

2 participants