Skip to content

Default to OIDC client post authentication method if the provider lists it as the only supported method #22032

Open
@sberyozkin

Description

Description

By default Quarkus OIDC supports a client basic authentication when talking to OIDC providers.
However, if a given OIDC provider supports only the client post authentication method and it is reported in the discovery doc, ex:

 "token_endpoint_auth_methods_supported": [
  "client_secret_post"
 ],

then there should be no need for the users to move to

quarkus.oidc.apple.credentials.client-secret.value=SECRET
quarkus.oidc.apple.credentials.client-secret.method=post

when

quarkus.oidc.apple.credentials.secret=SECRET

is already set

Implementation ideas

Update OidcConfigurationMetadata to check the auth methods and if it is post only - switch to it

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions