Skip to content

REST API : For GRANT TYPE - Client Credentials, support Client Authentication options ( Send as basic auth header, Send client credentials in body ) #13009

Open
@mansukh-tj

Description

@mansukh-tj
  1. When GRANT TYPE is selected as Client Credentials, currently we don't have an option to select Client Authentication method.

  2. Migration : To select Client Authentication option by default as Send Client Credentials in body for GRANT TYPE : Client Credentials.

  3. Edge case : Currently the Client Authentication option is working as Send Client Credentials in body for GRANT TYPE : Authorisation Code, even if we select Client Authentication as Send As Basic Auth Header. As mentioned below if a customer uses Facebook or Slack IDP and in their Client Authentication option if they have selected Send As Basic Auth Header it would have worked, after this update it won't work they would need to change the option back to Send Client Credentials in body because Facebook and Slack support only the option Send Client Credentials in body
    IDP Providers

  4. Support Both Client Authentication option ( Send Client Credentials in body & Send As Basic Auth Header. )
    ( Google, Microsoft (Azure AD), LinkedIn, Dropbox, Okta, Auth0, Amazon (Login with Amazon)

  5. Support only Send Client Credentials in body
    ( Facebook, Slack )

  6. Support only Send As Basic Auth Header
    ( Spotify, Reddit, Apple )

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions