Pain point · Reliability & bugs · Blocks work
Token exchange drops requested scopes since Keycloak 24
1 source thread · first seen 2024-05
Summary
Scopes requested during token exchange, such as offline_access, are discarded since version 24 when the original token lacks them, a regression from 23.
- Affects
- Developers using token exchange
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Since Keycloak 24 the requested scopes get discarded when the original access token does not contain them”