search

IdentityPython / JWTConnect-Python-OidcService

Implementation of OIDC/Oauth2 services
Apache License 2.0
6 stars 4 forks source link

[Question] How to make authn request with client_assertion_type and client_assertion by default #6

Closed peppelinux closed 4 years ago

peppelinux commented 5 years ago

standing at: https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication

there's the need of also: client_assertion and client_assertion_type

The authentication token MUST be sent as the value of the [OAuth.Assertions] client_assertion parameter.
The value of the [OAuth.Assertions] client_assertion_type parameter MUST be "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", per [OAuth.JWT].

Do we need to have this behaviour as default in: https://github.com/openid/JWTConnect-Python-OidcService/blob/d06bf271d6de51682c6a8a34a202c612855ec56f/src/oidcservice/client_auth.py#L382

peppelinux commented 4 years ago

youth errors