OIDC Public clients

[Cantor, Scott]

> I looked into the code [5] and if I understand it corretly
> “none” should be an option for
> token_endpoint_auth_method. 

I'd agree, it appears to support that.

> Can I configure token_endpoint_auth_method to “none” an
> don’t set a client_secret to accept a public client? 

I know we support them.

> If this is True I would suggest rephrasing the “Only one value
> per entity” on [2] to “Zero or one value per entity” and describing the available options including “none” somewhere. 

I'd recommend you file a bug against the documentation, like any bug report it just won't get remembered otherwise. Or edit it yourself if oyu prefer, the wiki remains open to that. We review any changes, as they're so rare that we can do that pretty easily.

-- Scott