The subset of a /token endpoint response that every grant is guaranteed to include. The
remaining TokenEndpointResponse properties are required for the interactive code flow but
are typically absent from a client_credentials response: providers commonly issue no refresh
token for that grant (renewal simply re-runs the grant — see
OpenIdConnectClient.createWithClientCredentials) and only include an id_token when the
openid scope applies to the service account.
The subset of a
/tokenendpoint response that every grant is guaranteed to include. The remaining TokenEndpointResponse properties are required for the interactive code flow but are typically absent from aclient_credentialsresponse: providers commonly issue no refresh token for that grant (renewal simply re-runs the grant — see OpenIdConnectClient.createWithClientCredentials) and only include anid_tokenwhen theopenidscope applies to the service account.