Skip to content

feat: resource parameter#108

Merged
telegrapher merged 20 commits intoadobe:mainfrom
Eiermitsucuk:main
Apr 17, 2026
Merged

feat: resource parameter#108
telegrapher merged 20 commits intoadobe:mainfrom
Eiermitsucuk:main

Conversation

@Eiermitsucuk
Copy link
Copy Markdown
Contributor

Description

Add --resource / -r flag (repeatable, comma-separated) to the token-issuing commands so callers can request audience-restricted access tokens per RFC 8707. The flag is wired through to the corresponding Resource field on each ims-go request type.

Flag added on:

  • exchange
  • refresh
  • on-behalf-of
  • authorize user
  • authorize pkce
  • authorize service
  • authorize clientCredentials

Not added on authorize jwt (JWT grant uses metascopes) or refresh per the IMS spec wording — happy to adjust if disagreed.

Motivation and Context

IMS now supports the aud claim via RFC 8707 resource indicators (feature flag RESOURCE_AUD_CLAIM_ENABLED).

How Has This Been Tested?

  • go build ./... and go vet ./... clean.
  • Manually exercised each flow against ims-na1-stg1 with -r https://api-alpha.example.com and verified the resource form/query parameter is sent on the wire.

Types of changes

  • New feature (non-breaking change which adds functionality)

@telegrapher telegrapher merged commit aa6d943 into adobe:main Apr 17, 2026
9 checks passed
Eiermitsucuk added a commit to Eiermitsucuk/imscli that referenced this pull request Apr 17, 2026
feat: resource parameter (adobe#108)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants