angular-auth-oidc-client icon indicating copy to clipboard operation
angular-auth-oidc-client copied to clipboard

[Question]: Can isAuthenticated be true even though there is no id_token?

Open dbrils opened this issue 2 years ago • 0 comments

What Version of the library are you using? 14.0.0

Question checkAuth() and isAuthenticated$ both return false when no id_token is present (after the code exchange has been done for an access token). An example response of the POST /access_token could be:

{ 
access_token: "eyJ0...Z"
expires_in: 3599
nonce: "abc"
scope: "scope"
token_type: "Bearer" 
}

Is this intentional behaviour? And would it be possible to only check the access_token? From what I can tell this is intended behaviour that cannot be changed, by looking at the isAuthenticated method of the AuthStateService.

image

dbrils avatar Jun 29 '22 14:06 dbrils