@@ -622,17 +622,18 @@ Below are some details specific to individual OIDC providers.
622
622
623
623
### Keycloak
624
624
625
- The access_type parameter has two possible values: "online" and "offline." By
626
- default, the value is set to "offline". This means that when a user
627
- authenticates using OIDC, the application requests offline access to the user' s
628
- resources, including the ability to refresh access tokens without requiring the
629
- user to reauthenticate.
625
+ The `access_type` parameter has two possible values: `online` and `offline`.
626
+ By default, the value is set to `offline`.
630
627
631
- To enable the ` offline_access` scope, which allows for the refresh token
628
+ This means that when a user authenticates using OIDC, the application requests
629
+ offline access to the user' s resources, including the ability to refresh access
630
+ tokens without requiring the user to reauthenticate.
631
+
632
+ To enable the ` offline_access` scope which allows for the refresh token
632
633
functionality, you need to add it to the list of requested scopes during the
633
- authentication flow. Including the ` offline_access ` scope in the requested
634
- scopes ensures that the user is granted the necessary permissions to obtain
635
- refresh tokens.
634
+ authentication flow.
635
+ Including the ` offline_access ` scope in the requested scopes ensures that the
636
+ user is granted the necessary permissions to obtain refresh tokens.
636
637
637
638
By combining the ` {" access_type" :" offline" }` parameter in the OIDC Auth URL with
638
639
the ` offline_access` scope, you can achieve the desired behavior of obtaining
0 commit comments