The Refresh Tokens Are Opaque in OAM 12c
(Doc ID 2981048.1)
Last updated on OCTOBER 16, 2023
Applies to:
Oracle Access Manager - Version 12.2.1.4.191223 and laterInformation in this document applies to any platform.
Goal
How to change/modify the refresh token format in OAM 12c (in order to have same format like in OAM 11g) ?
as per 36.4 About OAuth Tokens :
Refresh tokens carry the information necessary to get a new access token. In other words, whenever an access token is required to access a specific resource, a client may use a refresh token to get a new access token issued by the authentication server. Common use cases include getting new access tokens after old ones have expired, or getting access to a new resource for the first time. Refresh tokens can also expire but are rather long-lived.
Refresh tokens carry the information necessary to get a new access token. In other words, whenever an access token is required to access a specific resource, a client may use a refresh token to get a new access token issued by the authentication server. Common use cases include getting new access tokens after old ones have expired, or getting access to a new resource for the first time. Refresh tokens can also expire but are rather long-lived.
as per 36.4.2 OAuth Refresh Tokens :
The refresh token is used when the access token is no longer valid. Refresh tokens are generated only for Resource Owner Credentials and Authorization code flow.
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Goal |
| Solution |
| References |