I've a problem with simple_oauth module and scopes, on a D 9.3.x site.

I'm using it to authenticate user in a decoupled front-end in Next.js.

The case is:

  • A (new) user log-in without roles expect authenticated
  • After he compiles a form in the front end, he is assigned a new role, e.g. role 1

However I can't refresh the token with a scope with the now role. Looking at the the debug token end-point, he is still just authenticated.

From my tests:

  • if a user log-in while already having a role 1: if the authentication token is generated with the role 1 in the scope, this works. Both for access and refresh tokens.

  • The same does not for roles assigned after the login

Is there a solution to this problem?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.