When using BASIC authentication against a service, the ForwardAuth application will use the username and password as clientId and clientSecret to look up access token using client_credentials flow. This is useful when doing machine to machine lookup instead of end user authorization grant flow.
The access token retriever from the client_credentials flow is cached for 24 hours to avoid hitting the Auth0 endpoints exceed your API quota.
The access token retrieved will then be added to the forwarded request as a normal http header with Authorization Bearer token.
In addition to the new feature, this pull request also contains
When using BASIC authentication against a service, the ForwardAuth application will use the username and password as clientId and clientSecret to look up access token using client_credentials flow. This is useful when doing machine to machine lookup instead of end user authorization grant flow.
In addition to the new feature, this pull request also contains