I recently started to explore the OAuth 2.0 topic. After trying to make this library work and looking into the library code, some questions appeared. It seems that for authentication only access token is used. I've seen in different sources (docs and courses) that OpenID Connect should be used for that.
I can add openid
in SCOPES
setting and get the id_token but it would not be used at all.
Does Azure AD allow me to add lots of claims into both access_token and id_token? I've seen this in Optional claims.
Can someone explain why the lib has such implementation?
Pay now to fund the work behind this issue.
Get updates on progress being made.
Maintainer is rewarded once the issue is completed.
You're funding impactful open source efforts
You want to contribute to this effort
You want to get funding like this too