Overview#
Want_composite
OPTIONAL parameter defined in
OAuth 2.0 Token Exchange that when the value of this parameter is "true", it indicates the client's desire for a composite security token to be issued, which contains claims about both the main subject of the token as well as about the party who is authorized to act on behalf of that subject. Note that this parameter only provides a means for the
OAuth Client to indicate its preference and the
Authorization Server is not required to honor the stated preference and the nature of the
tokens it issues are ultimately at its discretion.
There might be more information for this subject on one of the following: