API Client Credentials Access Token Is Missing Base Claim auth_time

Questions API
1

I have a custom authroisation server setup and in the token preview, all base claims including auth_time appear as expected.

I worked through the quick start and created a token request using Postman and it authenticated fine, but the access token returned was missing the auth_time claim:-

{
  "ver": 1,
  "jti": "abc",
  "iss": "https://dev-123456.okta.com/oauth2/default",
  "aud": "api://default",
  "iat": 1690800526,
  "exp": 1690804126,
  "cid": "abc123456",
  "scp": [
    "quickstart-scope"
  ],
  "sub": "abc123456"
}

(i replaced some of the values, not sure if that was necessary, it’s my first time posting :slight_smile: )

Why is the auth_time claim missing? It is listed as a base claim in the docs and they are always supposed to be returned.

2

Which quickstart are you following and what endpoint is returning an error about a missing auth_time?

3

hi andrea, i am following the dotnetcore 3 api quickstart at:-

i am not getting any errors from the okta endpoints, i am actually just using the access token as part of a token exchange test that i am doing after i get the okta access token. the token exchange failed due to the missing auth_time claim and that was when i decoded the okta access token in jwt.io and saw that claim was indeed missing (although all the other relevant base claims were there). my quickstart server is at https://dev-7578413.okta.com/oauth2/default.