Skip to content

scope should be optional in client-credentials requests #396

Open
@nicwolff

Description

@nicwolff

scope is optional in the client-credentials flow but if I make a requests to the token endpoint with "grant_type": "client_credentials" but without "scope" I get

{
  "error": "invalid_scope: missing openid scope",
  "error_description": null
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions