Using Access Tokens

The access token can be used by calling the getAccessToken() method.

Accessing the access token

You can get the access token by calling the method getAccessToken() on the OidcSecurityService

this.oidcSecurityService.getAccessToken().subscribe(at => ...);

If the user is not authenticated, the observable emits an empty string.

or for a specific config:

this.oidcSecurityService.getAccessToken('configId').subscribe(at => ...);

You can then manually use the token within HttpHeaders when performing an HTTP request with Angular's HttpClient:

import { HttpHeaders } from '@angular/common/http';

this.oidcSecurityService.getAccessToken().subscribe((token) => {
  const httpOptions = {
    headers: new HttpHeaders({
      Authorization: 'Bearer ' + token,
    }),
  };
});

Revoke the access token

Access tokens can be revoked using the revokeAccessToken(accessToken?, configId?) method. Without a parameter, the stored access token is revoked. If you provide the access token as a parameter, any access token from the same Security Token Service can be revoked. The Security Token Service has to expose a revocation_endpoint. The request is retried twice, after which the observable errors with Revocation request failed. Refresh tokens can be revoked in the same way with revokeRefreshToken().

revokeAccessToken() {
  this.oidcSecurityService.revokeAccessToken()
      .subscribe((result) => console.log(result));
}