Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Add support to add optional parameters in OAuth2 introspection request #23

Closed
ldclakmal opened this issue Oct 21, 2020 · 1 comment · Fixed by ballerina-platform/module-ballerina-http#164
Assignees
Labels
Area/Security Issues related to stdlib security module/oauth2 Type/Improvement Verson/SwanLakeDump All issues planned for Swan Lake GA release

Comments

@ldclakmal
Copy link
Member

Description:
Need to support to add optional/custom parameters in OAuth2 introspection request.

Example: Support to add optional parameters like client_id and client_certificate_thumbprint

POST /oauth2/introspect 
HTTP/1.1Host: www.sample.com
Content-Type: application/x-www-form-urlencoded

Authorization: Basic some-token

client_id="some-value"&client_certificate_thumbprint=another-value&token=sample-token&token_type_hint=access_token

https://tools.ietf.org/html/rfc7662#section-2.1

@ldclakmal ldclakmal self-assigned this Oct 21, 2020
@ldclakmal
Copy link
Member Author

Since those parameters are dynamic values, this cannot be fixed with the existing design. Hence, this will be addressed in future releases.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
Area/Security Issues related to stdlib security module/oauth2 Type/Improvement Verson/SwanLakeDump All issues planned for Swan Lake GA release
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant