HCan i get access, refresh and id token by using my own login ui and provide only credentials, also this component will be like overlay and for us very important dont use any redirect from the current page. How can I make this or its impossible ?
Ryou can make a request to
oauth/v2/token and you get back access_token, id_token, and a refresh_token BUT Impossible to safely do a pure-JavaScript, credential-POST overlay that directly returns all three tokens from the browser.