search

spring-projects / spring-authorization-server

Spring Authorization Server
https://spring.io/projects/spring-authorization-server
Apache License 2.0
4.84k stars 1.27k forks source link

refresh token by authentication method is private_key_jwt is error #1665

Closed ithander closed 3 months ago

ithander commented 3 months ago

Describe the bug A clear and concise description of what the bug is. when my client setup provider: oauth client-id: clientid client-authentication-method: private_key_jwt authorization-grant-type: authorization_code scope: openid,profile redirect-uri: '{baseUrl}/login/oauth2/code/clientid' and some config code it work bug when access_token is expired refresh token report error: There was an unexpected error (type=Internal Server Error, status=500). This class supports client_secret_basic, client_secret_post, and none by default. Client [authCodePrivateKeyJwt] is using [private_key_jwt] instead. Please use a supported client authentication method, or use setRequestEntityConverter to supply an instance that supports [private_key_jwt]. java.lang.IllegalArgumentException: This class supports client_secret_basic, client_secret_post, and none by default. Client [authCodePrivateKeyJwt] is using [private_key_jwt] instead. Please use a supported client authentication method, or use setRequestEntityConverter to supply an instance that supports [private_key_jwt].

To Reproduce

Expected behavior I wish it work normal

Sample