revomatico / kong-oidc

OIDC plugin for Kong
Apache License 2.0
110 stars 75 forks source link

Can this plugin be used with no `client_secret`? #25

Closed fer8a closed 1 year ago

fer8a commented 1 year ago

Hello there,

One of the things that I noticed while configuring this plugin is the config.client_secret parameter being required. Is there a way to make it optional to use the plugin with public clients (like a SPA) where you can't store the client_secret securely? Perhaps is something that I'm missing or not fully understanding.

Thanks in advance!