Gustavo Valverde 9d3e917cca fix(oauth-provider)!: find introspected tokens regardless of token_type_hint ...

RFC 7662 §2.1 requires the server to extend its search across all
supported token types when the hint does not match. Introspect only
searched the hinted type, so a valid refresh token sent with
token_type_hint=access_token (or the reverse) returned active: false.

2026-10-15 09:29:39 +01:00

..

_generated/docs/v1-6

docs: add versioned documentation (#11041)

2026-08-29 07:10:36 +09:00

blogs

docs: explain the 1.7 account schema transition (#11196)

2026-09-09 10:08:03 +00:00

changelogs

…

docs

fix(oauth-provider)!: find introspected tokens regardless of token_type_hint

2026-10-15 09:29:39 +01:00