Event.session Object and Related Properties Are Not Populated in Actions
Last Updated:
Overview
This article explains why the event.session and event.refresh_token.session* objects are not populated when accessed in Actions. This behavior occurs even when the authorization request is for refresh tokens and the tenant is entitled to session management.
Applies To
- Actions
- Session Management
- Resource Owner Password Grant
- Client Credential Grant
Cause
The event.session object and the associated session management functionality are designed to work exclusively with web-based authentication flows.
Solution
This is expected behavior. The event.session and event.refresh_token.session* objects will not be populated for grant types that are not web-based. The unsupported flows include:
- Resource Owner Password Grant
- Client Credential Grant
