Solutionunvalidated
Use OAuth’s downstream API/on-behalf-of flow so B exchanges the incoming user token for a new access token targeted for C (with required scopes/audience), then use that token when B calls C.
2d8fb185-a0b0-454c-848c-23d63f0e2bba
Use OAuth’s downstream API/on-behalf-of flow so B exchanges the incoming user token for a new access token targeted for C (with required scopes/audience), then use that token when B calls C.