fix(js SDK): getAccessTokenByRefreshToken should not return idToken

getAccessTokenByRefreshToken should not return idToken
logto-io · Jun 25, 2022 · 95a1b96 · 95a1b96
1 parent 53c5eed
commit 95a1b96
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/packages/browser/src/index.ts b/packages/browser/src/index.ts
@@ -314,7 +314,13 @@ export default class LogtoClient {
       const { tokenEndpoint } = await this.getOidcConfig();
       const { accessToken, refreshToken, idToken, scope, expiresIn } =
         await fetchTokenByRefreshToken(
-          { clientId, tokenEndpoint, refreshToken: this.refreshToken, resource },
+          {
+            clientId,
+            tokenEndpoint,
+            refreshToken: this.refreshToken,
+            resource,
+            scopes: ['offline_access'], // Force remove openid scope from the request
+          },
           this.requester
         );