Skip to content

Commit a68ee8a

Browse files
Fix review comments
1 parent d9afa09 commit a68ee8a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

en/includes/guides/fragments/manage-app/oidc-settings/access-token.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@
2727
```
2828

2929
!!! note
30-
By default, the `scope` claim in JWT access tokens is formatted as a space-separated string (e.g., `"scope": "openid profile email"`). This format is compliant with the **JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens ([RFC 9068](https://www.rfc-editor.org/rfc/rfc9068.html))**.
30+
By default, the `scope` claim in JWT access tokens uses a space-separated string format (e.g., `"scope": "openid profile email"`). This format complies with the **JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens ([RFC 9068](https://www.rfc-editor.org/rfc/rfc9068.html))**.
3131

3232
You can change this to a JSON array format (e.g., `"scope": ["openid", "profile", "email"]`), but this is **not recommended** as it deviates from the standard specification.
3333

3434
If you still require this configuration, it can be applied at two levels:
3535

3636
- **Application level**: Set the `enableJwtScopeAsArray` property in the application's `accessToken` configuration via the [Application Management API]({{base_path}}/apis/{% if product_name == "Asgardeo" %}application-management{% else %}application-rest-api{% endif %}/). This overrides the tenant-level setting for the specific application.
3737
{% if product_name == "WSO2 Identity Server" %}
38-
- **Tenant level**: Use the [Server Configuration API]({{base_path}}/apis/configs-rest-api/) to set the `enableJwtScopeAsArray` property in the OAuth2 inbound authentication configuration (`/configs/authentication/inbound/oauth2`). This applies to all applications in the tenant unless overridden at the application level.
38+
- **Tenant level**: Use the [Server Configuration API]({{base_path}}/apis/configs-rest-api/#tag/Inbound-Authentication-Configurations/operation/updateOAuth2InboundAuthConfig) to set the `enableJwtScopeAsArray` property. This applies to all applications in the tenant unless overridden at the application level.
3939
{% endif %}
4040
{% if product_name == "Asgardeo" %}
4141
- **Organization level**: Set the `enableJwtScopeAsArray` property via the following API. This applies to all applications in the organization unless overridden at the application level.

0 commit comments

Comments
 (0)