If a token expired, two ways to get a fresh one are provided. Either using getPasswordAccessToken either by getClientCredentialsAccessToken which relies upon client client's id and secret:
|
private function getClientCredentialsAccessToken(): OAuthAccessToken |
I think it's missing the 3rd one, using a private key. Would you accept a MR which would basically add a (?string) $privateKey parameter on the model of $clientId & co and a getJwtAccessToken($client_id, $private_key, $validity = 3600) method?
Please note that OAuthRestClient is final.