open-payments
open-payments copied to clipboard
open-payments client should validate management url format
Anytime we return an access_token
in the open-payments
client (grant creation, grant continuation, token rotation), the access_token
format should always match the format: ${grant.authServer.url}/token/${grant.managementId}
.
Related thread