#dev 2020-11-17

2020-11-17 UTC

Zegnat Whether to issue refresh tokens or not, if you see this as a security feature, I would say it has to be user choice. And then it would make sense for it to be part of the authorisation screen, rather than client initiated like scopes