Skip to content

Conversation

@LZoog
Copy link
Contributor

@LZoog LZoog commented Jan 23, 2026

Because:

  • We want to allow a refresh token exchange for Mobile, that grants Relay as an additional scope, as the users enrolled will already have signed into Relay web

This commit:

  • Adds the new grant type, sets client IDs and allowed scopes to env vars, currently set to mobile IDs and only Relay scope

closes FXA-12925

@LZoog LZoog requested a review from a team as a code owner January 23, 2026 16:52
@LZoog LZoog changed the title feat(oauth): Add refresh token exchange grant option to oauth/token feat(oauth): Add token exchange grant option to oauth/token Jan 23, 2026
Because:
* We want to allow a refresh token exchange for Mobile, that grants Relay as an additional scope, as the users enrolled will already have signed into Relay web

This commit:
* Adds the new grant type, sets client IDs and allowed scopes to env vars, currently set to mobile IDs and only Relay scope

closes FXA-12925
@bendk
Copy link

bendk commented Jan 23, 2026

Component side of this: mozilla/application-services#7179

});

it('rejects tokens from non-Firefox clients', async () => {
const NON_FIREIOS_FOX_CLIENT_ID = '123456789a';
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

NON_FIREIOS_FOX_CLIENT_ID ha, bad find-and-replace, will update with next push.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants