Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Help needed: How to use a certain auth method? #861

Open
Janne-M opened this issue May 30, 2024 · 2 comments
Open

Help needed: How to use a certain auth method? #861

Janne-M opened this issue May 30, 2024 · 2 comments
Labels

Comments

@Janne-M
Copy link

Janne-M commented May 30, 2024

Can I force AppAuth to use a certain auth method when I'm using the OIDAuthorizationRequest() method?

One IDP I'm trying to use returns all 4 alternative auth method in the configuration document, but require us to use the client_secret_jwt as the auth method. But when using OIDAuthorizationRequest it will then default to client_secret_basic.
Is there a way for me to tell AppAuth that we should only use the client_secret_jwt menthod?

@Janne-M Janne-M added enhancement triage Issues that need to be triaged labels May 30, 2024
@KarlBusse
Copy link

KarlBusse commented May 30, 2024

Have you read this section of the (android) readme?

Also, you’re probably being required to use client_secret_jwt because that’s what is configured in the idp for your client. Worth checking/asking if that can be changed to ‘none’ to remove the requirement, since native apps can’t keep secrets.

@Janne-M
Copy link
Author

Janne-M commented May 30, 2024

Thanks Karl for your input!
Yup, the secret is dynamic and is not stored in the app it selves. All these requirements come from a "important" IDP, and they have their view on how things are suposed to be done. So far they say that we must authenticate us with a secret and _basic and _post are not secure enough...
This is annoying since I have made a generic OIDC implementation that are configurable so my users should be able to use basically any IDP that speaks OIDC.

@mdmathias mdmathias added question and removed enhancement triage Issues that need to be triaged labels May 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants