nokia / kong-oidc

OIDC plugin for Kong
Apache License 2.0
461 stars 330 forks source link

Doesnt work when OIDC introspect is client_secret_basic #47

Closed arun2dot0 closed 6 years ago

arun2dot0 commented 6 years ago

Using it with a OIDC provider that supported only introspection mechanism "client_secret_basic" the introspect fails . It's because the lua-restly-openidc version 5.3 doesn't honor it

Refer Line 1209 of https://github.com/zmartzone/lua-resty-openidc/blob/v1.5.3/lib/resty/openidc.lua json, err = openidc_call_token_endpoint(opts, opts.introspection_endpoint, body, nil, "introspection")

Please update lua-resty-openidc to verion 1.5.4 with support for introspection based on client_secret_basic