Closed as not planned
Description
Description
For OIDC to OIDC Client token exchange, Keycloak ask for user consent based on target client.
However, token exchange is not a browser flow. So, user can not give any extra consent and 'INVALID_CLIENT' error maybe returned.
So, we propose to remove consent asked in token exchange.
We want clients executing token exchange to request consent in other OAuth flows. So, it is not a solution to disable consent in these clients.
Discussion
No response
Motivation
No response
Details
No response