Type alias: ClientAuthenticationMethod

💗 Help the project

Ƭ ClientAuthenticationMethod: "client_secret_basic" | "client_secret_post" | "private_key_jwt" | "none"

Supported Client Authentication Methods.

• client_secret_basic (default) uses the HTTP Basic authentication scheme to send client_id and client_secret in an Authorization HTTP Header.
• client_secret_post uses the HTTP request body to send client_id and client_secret as application/x-www-form-urlencoded body parameters.
• private_key_jwt uses the HTTP request body to send client_id, client_assertion_type, and client_assertion as application/x-www-form-urlencoded body parameters. The client_assertion is signed using a private key supplied as an options parameter.
• none (public client) uses the HTTP request body to send only client_id as application/x-www-form-urlencoded body parameter.

see RFC 6749 - The OAuth 2.0 Authorization Framework

see OpenID Connect Core 1.0

see OAuth Token Endpoint Authentication Methods