Token exchange, Google One Tap login + Zitadel as identity broker
Original message was deleted
FUhm that is an good question.
I think ATM we only support internal exchange of tokens. But you can surely use impersonation to get a valid token https://zitadel.com/docs/guides/integrate/token-exchange#impersonation-by-user-id-example
@muhlemmer might know the best here
I think ATM we only support internal exchange of tokens. But you can surely use impersonation to get a valid token https://zitadel.com/docs/guides/integrate/token-exchange#impersonation-by-user-id-example
@muhlemmer might know the best here
The Token Exchange grant implements RFC 8693, OAuth 2.0 Token Exchange and can be used to exchange tokens to a different scope, audience or subject. Changing the subject of an authenticated token is called impersonation or delegation. This guide will explain how token exchange is implemented inside ZITADEL and gives some usage examples.
