Refresh-parameters-whitelist (Section)#

Path: /profiles/profile{id, type}/settings/apps-service/applications/application{id}/token-handler/refresh-parameters-whitelist

Parameters#

NameTypeRequiredDefaultDescription
allowed-parametermulti-value, non-empty-stringoptionalThe names of the parameters that are allowed to be sent by an SPA in ‘refresh’ requests. The ‘scope’ parameter is always allowed and it doesn’t have to be whitelisted here.

Was this helpful?