The API is expected to be called only when the value of the action
parameter in a response from the /auth/token API is ID_TOKEN_REISSUABLE. The purpose
of the /idtoken/reissue API is to generate a token response that
includes a new ID token together with a new access token and a refresh
token.
Authenticate every request with a Service Access Token or Organization Token.
Set the token value in the Authorization: Bearer <token> header.
Service Access Token: Scoped to a single service. Use when automating service-level configuration or runtime flows.
Organization Token: Scoped to the organization; inherits permissions across services. Use for org-wide automation or when managing multiple services programmatically.
Both token types are issued by the Authlete console or provisioning APIs.
A service ID.
The value of this parameter should be (a) the value of the
"jwtAccessToken" parameter in a response from the
/auth/token API when the value is available, or (b)
the value of the "accessToken" parameter in the
response from the /auth/token API when the value of
the "jwtAccessToken" parameter is not available.
The value of this parameter should be the value of the
"refreshToken" parameter in a response from the
/auth/token API.
The value that should be used as the value of the "sub"
claim of the ID token.
This parameter is optional. When omitted, the value of the subject
associated with the access token is used.
Additional claims that should be embedded in the payload part of the ID token. The format is a JSON object. This parameter is optional.
Additional parameters that should be embedded in the JWS header of the ID token. The format is a JSON object. This parameter is optional.
The type of the "aud" claim of the ID token being issued.
Valid values of this parameter are as follows.
Value Description " array"The type of the audclaim becomes an array of strings." string"The type of the audclaim becomes a single string.
This parameter is optional, and the default value on omission is
"array".
This parameter takes precedence over the idTokenAudType property
of {@link Service} (cf. {@link Service#getIdTokenAudType()}).
ID token reissued successfully
The code which represents the result of the API call.
A short message which explains the result of the API call.
The next action that the implementation of the token endpoint should take.
OK, INTERNAL_SERVER_ERROR, CALLER_ERROR The response content that can be used as the message body of the token response that should be returned from the token endpoint.
The reissued ID token