Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: Archive - 21'
Affects Version/s: RH-SSO-7.2.4.GA
Component/s: Server
Labels:
None

Steps to Reproduce:

Hide

Request a new token.
Attempt to introspect refresh token with .../protocol/openid-connect/token/introspect, token_type_hint = refresh_token
Response is "active": false

Show
Request a new token. Attempt to introspect refresh token with .../protocol/openid-connect/token/introspect, token_type_hint = refresh_token Response is "active": false

SFDC Cases Links:
SFDC Cases Counter:

Description

RefreshTokenIntrospectionProvider extends AccessTokenIntrospectionProvider (and provides no additional functionality)

All refresh token introspections are handled the same way as access token introspections and end up being passed to the org.keycloak.TokenVerifier. The default behaviour for this class is to reject anything with type != "Bearer" meaning that refresh and offline tokens are rejected even while still valid.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Hisanobu Okuda

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2018/12/06 2:23 AM

Updated:: 2021/12/06 11:17 AM

Resolved:: 2021/12/06 11:17 AM