wso2 / financial-services-accelerator

WSO2 Open Banking Accelerator is a collection of technologies that increases the speed and reduces the complexity of adopting open banking compliance. Instead of building a solution from scratch, you can use WSO2 Open Banking Accelerator to meet all legislative requirements with additional benefits beyond compliance.
Apache License 2.0
7 stars 22 forks source link

[Accelerator4] - Able to use private_key_jwt method to generate access token from Mutual TLS application #117

Open malshaniS opened 1 month ago

malshaniS commented 1 month ago

Description: Able to use private_key_jwt method to generate an access token from an application which is having Mutual TLS authentication method.

Screenshot 2024-09-13 at 7 59 08 AM

Authentication method of application(clientid: fpk4iXvTBe5WFWUVsF641zQ0NaMa)

Screenshot 2024-09-13 at 7 59 52 AM

According to the expected behaviour, this should return an error saying "Request does not follow the registered token endpoint auth method tls_client_auth"

Suggested Labels:

Suggested Assignees:

Affected Product Version:

OS, DB, other environment details and versions:

Steps to reproduce:

  1. Create an SP with Mutual TLS authentication method.
  2. Generate client credential grant access token using the private_key_jwt method.
  3. Verify the response.

Related Issues: