{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2265","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2265/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2265/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2265/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2265","id":121056857,"number":2265,"title":"What is expected implicit flow behaviour regarding access token claims?","user":{"login":"n-alex-white","id":2327254,"avatar_url":"https://avatars.githubusercontent.com/u/2327254?v=3","gravatar_id":"","url":"https://api.github.com/users/n-alex-white","html_url":"https://github.com/n-alex-white","followers_url":"https://api.github.com/users/n-alex-white/followers","following_url":"https://api.github.com/users/n-alex-white/following{/other_user}","gists_url":"https://api.github.com/users/n-alex-white/gists{/gist_id}","starred_url":"https://api.github.com/users/n-alex-white/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/n-alex-white/subscriptions","organizations_url":"https://api.github.com/users/n-alex-white/orgs","repos_url":"https://api.github.com/users/n-alex-white/repos","events_url":"https://api.github.com/users/n-alex-white/events{/privacy}","received_events_url":"https://api.github.com/users/n-alex-white/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-12-08T17:25:59Z","updated_at":"2015-12-19T16:47:02Z","closed_at":"2015-12-19T16:47:02Z","body":"When doing implicit flow for openid connect, I post to the authorize endpoint and receive back an id token and an access token.\r\n\r\nIf I include additional scope values to request additional claims (http://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims), I would expect to see those additional claims in the access token, but at the moment I see them in the id token but not in the access token.\r\n\r\nI had expected that to be the case if no access token was issued, but when one is requested as part of the implicit flow the access token should have the additional claims, no?\r\n\r\nIs this by design in IDS3, or is there a problem here?\r\n\r\nThanks"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/166002395","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2265#issuecomment-166002395","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2265","id":166002395,"user":{"login":"leastprivilege","id":1454075,"avatar_url":"https://avatars.githubusercontent.com/u/1454075?v=3","gravatar_id":"","url":"https://api.github.com/users/leastprivilege","html_url":"https://github.com/leastprivilege","followers_url":"https://api.github.com/users/leastprivilege/followers","following_url":"https://api.github.com/users/leastprivilege/following{/other_user}","gists_url":"https://api.github.com/users/leastprivilege/gists{/gist_id}","starred_url":"https://api.github.com/users/leastprivilege/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leastprivilege/subscriptions","organizations_url":"https://api.github.com/users/leastprivilege/orgs","repos_url":"https://api.github.com/users/leastprivilege/repos","events_url":"https://api.github.com/users/leastprivilege/events{/privacy}","received_events_url":"https://api.github.com/users/leastprivilege/received_events","type":"User","site_admin":false},"created_at":"2015-12-19T16:47:02Z","updated_at":"2015-12-19T16:47:02Z","body":"any progress? closing. feel free to re-open if needed."}}