docs: note invalid_grant on inactive subject state during token exchange

Extend SDK integration guidance to cover provider-side active-state enforcement at token issuance, where invalid_grant may be returned if client/user/project is inactive.
This commit is contained in:
Andy Dixon
2026-02-26 12:05:06 +00:00
parent 4d612b57f4
commit 49265eee0f
+1
View File
@@ -135,6 +135,7 @@ try {
``` ```
`UserInfoException` with `invalid_token` can occur when provider-side subject scope is no longer active (for example user/project disabled) between token issuance and userinfo retrieval. `UserInfoException` with `invalid_token` can occur when provider-side subject scope is no longer active (for example user/project disabled) between token issuance and userinfo retrieval.
`TokenExchangeException` with `invalid_grant` can also occur when provider-side client/user/project state is inactive at exchange time.
## Operational guidance ## Operational guidance