<?xml version="1.0" encoding="UTF-8"?>
<c:config xmlns:c="http://www.sourceid.org/2004/05/config">
  <c:item name="scope.whitelist">[a-zA-Z0-9!#$%&amp;'()*+,-./:;&lt;=>?@\[\]^_`{|}~]+</c:item>
  <c:item name="MaximumSecondaryClientSecrets">5</c:item>
  <c:item name="RevokeReplayedRefreshToken" defaultForUpgrade="false" >true</c:item>
  <c:item name="RevokeRefreshTokenForFailedIssuanceCriteria" defaultForUpgrade="true" >false</c:item>
</c:config>
