You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
§5.2 Modifying an Existing Request: Editor's note:
We could state something like "resources and subject MUST NOT be the same as in the initial or previous request" to enforce that this really is a change, but is there value in calling that out here? Somehow we do probably want to tell the AS to not let a client simply post the same request here to rotate access tokens now that we've got an explicit function for that, right?
The text was updated successfully, but these errors were encountered:
I don't think it's a meaningful distinction to make from the client's perspective; suggest adding additional text about differentiating between grant PATCH and access token rotation (new token vs. rotated token) and close in favor of #353
§5.2 Modifying an Existing Request: Editor's note:
We could state something like "resources and subject MUST NOT be the same as in the initial or previous request" to enforce that this really is a change, but is there value in calling that out here? Somehow we do probably want to tell the AS to not let a client simply post the same request here to rotate access tokens now that we've got an explicit function for that, right?
The text was updated successfully, but these errors were encountered: