For now my target webhook is just there to print request body and to attach some claims for testing.
When the token type is JWT, preaccesstoken action is triggered, response is modified and everything is fine. When the token type is Bearer, "preaccesstoken" action is not triggered.
Bearer token is a bit shorter compared to JWT and we prefer to use it because we can easily store it in secure storage on different mobile platforms, while JWT can be too big sometimes. We would use token introspection where we would provide Bearer token and receive claims that we could dynamically attach using preaccesstokenpreaccesstoken action, but unfortuantelly it does not work.
Is that expected behavior and if so, why?
Continue the conversation
Join the Discord to ask follow-up questions and connect with the community
Z
ZITADEL
ZITADEL - Identity infrastructure, simplified for you.