Tokens rotation with additional headers - helper functions

[wojteklembryk]

Set of helpers to perform action with fresh tokens and additional headers in case of tokens rotation

[ywsang]

Hi @wojteklembryk, thanks for the PR! Would you be able to provide us with some info about your use case for such helper functions?

[wahabniazi56]

This is indeed very good addition, sometimes we need to pass headers in token requests. @mdmathias could you please merge into master?

[DanielRivers]

@ywsang A use case here is Kinde uses a header value in the request to determine which SDK is making the request.

[guilhermehmcarvalho]

Hi @wojteklembryk, thanks for the PR! Would you be able to provide us with some info about your use case for such helper functions?

I can say that DPoP implementation is one such case.

[wojteklembryk]

Hi everyone,
Apologies for the delayed response—I accidentally missed this thread.

@ywsang, there are several use cases that require passing additional headers during token rotation, such as:

• DPoP, as mentioned by @guilhermehmcarvalho
• Device fingerprinting
• Bot protection
• Passing additional metadata like the SDK version (as mentioned by @DanielRivers ) or device state
• Tracing/observability

Overall, this PR does not introduce any new functionality; it simply exposes the changes introduced in #770 by @mdmathias.

Thanks for your suport and great work 👍

[guilhermehmcarvalho]

I'd like to bring back the discussion about this topic. It's a simple PR but crucial to some cases. We've been using a fork based on this branch for a long time now and it would be nice to have it merged so we can go back to using the main branch.