Hi @lvilasboas-dti,
Apologies for the delay here - I just heard back from the team. Regarding custom headers/query parameters on server-side requests:
- custom headers: they are ignored
- custom query params: they ignored for
/tokenendpoint. They can be used on/authorizeand then can be incorporated into New Universal Llgin templates if they includeext-prefix. Read this. Available in postLogin event.request.query for calls to/authorize - custom body params: they are available in postLogin and M2M
event.request.bodyin Actions
Thanks,
Mary Beth