Patrik Oldsberg
562 B
562 B
@backstage/core-app-api, @backstage/plugin-app
| @backstage/core-app-api | @backstage/plugin-app |
|---|---|
| patch | patch |
The OAuth 2 client implementations will now attempt to refresh the session when the existing session doesn't have the required scopes. The previous behavior was to only try to refresh the session of it was missing, and otherwise directly request a new session. This fixes an issue where some auth providers will not return access tokens with certain scopes unless explicitly requested, leading to an auth popup even if the underlying session already had been granted the requested scopes.