Reserved Project ID scopes

Original message was deleted

F

fabienne•12/18/24, 12:29 PM

yes this is expected behaviour, with that scope you just tell zitadel to add those to the audience of the token, audience does mean that the token is issued for that client, but does not say if the user has permission to use that client

ZITADEL Join

ZITADEL - Identity infrastructure, simplified for you.

4,316Members

View on Discord

Powered by

F

fabienne•12/18/24, 12:29 PM

yes this is expected behaviour, with that scope you just tell zitadel to add those to the audience of the token, audience does mean that the token is issued for that client, but does not say if the user has permission to use that client