package oidc

  1. Overview
  2. Docs
On This Page
  1. Notes

Module Token.RefreshTokenRequestSource

Types and functions to work with the token endpoint

Sourcetype t = {
  1. grant_type : string;
  2. scope : Scopes.t list;
  3. refresh_token : string;
  4. client_id : string;
  5. client_secret : string option;
  6. redirect_uri : Uri.t;
}

A token request

Sourceval make : grant_type:string -> scope:Scopes.t list -> redirect_uri:Uri.t -> refresh_token:string -> Client.t -> t
Sourceval to_body_string : t -> string

Creates the body for the token request

Sourceval of_body_string : string -> (t, [> `Msg of string ]) result

Parses a request body into a t

Notes

The Authorization Server MUST validate the Token Request as follows:

  • Authenticate the Client if it was issued Client Credentials or if it uses another Client Authentication method, per Section 9.
  • Ensure the Authorization Code was issued to the authenticated Client.
  • Verify that the Authorization Code is valid.
  • If possible, verify that the Authorization Code has not been previously used.
  • Ensure that the redirect_uri parameter value is identical to the redirect_uri parameter value that was included in the initial Authorization Request. If the redirect_uri parameter value is not present when there is only one registered redirect_uri value, the Authorization Server MAY return an error (since the Client should have included the parameter) or MAY proceed without an error (since OAuth 2.0 permits the parameter to be omitted in this case).
  • Verify that the Authorization Code used was issued in response to an OpenID Connect Authentication Request (so that an ID Token will be returned from the Token Endpoint).