Problem with the scope that is returned in the response to get the token

Here my authentication stack:

• SimpleIdConnect using PKCE
• https://github.com/authts/oidc-client-ts of @brockallen (that U certainly heard of 🤣)

When getting the access token using the api token, his client library expects to receive back a scope that is a string in the same format than the scope we usually submit to authentication servers (a sequence of scopes separated with a space). It appears that SimpleIdServer doesn’t return a string in this format but an array of string representing the list of scopes.

By looking in your code, I see this is fully intentional: https://github.com/simpleidserver/SimpleIdServer/blob/f58f998b702f648b9c6f79aed1fcd015872a935e/src/OAuth/SimpleIdServer.OAuth/Api/Token/Handlers/BaseCredentialsHandler.cs#L40-L47

My question is:

Who, from the two of you must correct something in his development? 😄

FYI, here is the issue I raised at oidc.client.ts side: https://github.com/authts/oidc-client-ts/issues/542

[simpleidserver]

Probably tomorrow 😃

[simpleidserver]

A pre-release package version “2.0.9-ci-00282” is available on the feed “https://www.myget.org/F/advance-ict/api/v3/index.json”