[Unity-idm-discuss] Issue on fetching new access tokens from (public) OAuth clients using upstreamACRs in output translation profile

[Sander A. <sa....@fz...>]

Hi Krzysztof,
hi Roman,

we encountered an issues where a public OAuth client gets error, when
it tries to get a new access and refresh token, using a refresh token.
The output translation profile creates an error because it can not
access upstreamACRs. Which might make sense, since in using refresh
tokens you do not have an upstream ACR. Would it make more sense to
store the information from the original login and send the result
instead of trying to resolve it again?

I assume the same issue comes up for confidential clients.

I also attached the stack trace itself.

Best regards,
Sander

-- 
Large-Scale Data Science
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Jülich GmbH
52425 Jülich
Sitz der Gesellschaft: Jülich
Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
Geschäftsführung: Prof. Dr. Astrid Lambrecht (Vorsitzende),
Dr. Stephanie Bauer (stellvertretende Vorsitzende),
Prof. Dr. Ir. Pieter Jansens, Prof. Dr. Laurens Kuipers
-----------------------------------------------------------------------
-----------------------------------------------------------------------