- changed status to open
5.4 (te) Down scoping
Issue #1224
open
The current draft down scopes the request by sending parameters to the claims endpoint. This is fine, but we probably should document why we do not use down scoping at the token endpoint to obtain a down scoped access token.
Comments (1)
-
reporter - Log in to comment
Down scoping at the token endpoint should still work. It is adding an additional mechanism.