search

lepture / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.
https://authlib.org/
BSD 3-Clause "New" or "Revised" License
4.45k stars 445 forks source link

Client ID containing a colon doesn't work with OAuth2's client_secret_basic authentication method #595

Closed Prilkop closed 9 months ago

Prilkop commented 9 months ago

Client ID containing a colon doesn't work with OAuth2's client_secret_basic authentication method.

The colon in the Client ID is currently sent as is, confusing the basic authentication parser in the server.