Enhance Refresh Token workflow for SDDMS

  • allow customizing scopes
  • properly add Content-Length header in refresh HTTP request (avoid 400 responses with some IDP eg Azure)
  • make clientSecret optional, as it is not needed when using PKCE

Merge request reports

Loading