diff --git a/docs/spec/auth/token.md b/docs/spec/auth/token.md index a953ede2a..9f3167be7 100644 --- a/docs/spec/auth/token.md +++ b/docs/spec/auth/token.md @@ -111,6 +111,16 @@ Defines getting a bearer and refresh token using the token endpoint. subject with different scopes. The refresh token does not have an expiration and should be considered completely opaque to the client. +
+ client_id +
+
+ String identifying the client. This client_id does not need + to be registered with the authorization server but should be set to a + meaningful value in order to allow auditing keys created by unregistered + clients. Accepted syntax is defined in + [RFC6749 Appendix A.1](https://tools.ietf.org/html/rfc6749#appendix-A.1). +
scope