OIDC help

[Henri Mikkonen]

Hello,

As you seem to have configured the 'client_secret_post' as the token 
endpoint authentication method on your RP/client, have you also 
configured the same in the RP metadata?

The default value is 'client_secret_basic', as specified in [1]. You can 
use the attribute 'token_endpoint_auth_method' for overriding it.

BR,
Henri.

[1] https://openid.net/specs/openid-connect-registration-1_0.html

On 19.9.2024 6.38, Jeffrey J Ramsay via users wrote:
> Hello -
> 
> I am in the process of configuring the openid service and need some 
> assistance. Our member support is still being finalized, so I am unable 
> to create a project and not sure what I should share on the public forum.
> 
> I'm using the openid client with a basic config.
> 
> $oidc->setTokenEndpointAuthMethodsSupported(['client_secret_post']);
> $oidc->addScope('email profile');
> 
> The errors I an recieving are:
> DEBUG [PROTOCOL_MESSAGE.OAUTH2:135] -
> AuthenticationSuccessResponse{authorizationCode=AApzZWNyZXQxNTAyykyk7qQtshuJSLoRry30CQfwjvpsHhCzpUBq_qtUa6KnQiFhM5A36cQQU2Gu3D4VGOpBLoj-XxiDIOjWISd3aDXGWc2cRAsLYTQ73NstCFsQOfp15z0G8q71mVGOT2o-TY1R4CEo7Fyvd8JPZB5jAAhCdghbIc7tZe-KjK3O98lcaxV5rS2SvD4XJNO9aZGGEbUg7Kp6Bkxv4mdGyXFxJTlXDkqp9DmYBrmDY5m9DQ7z-EeuNO5SsPqYWmCPlIOe_PxtCrjxcrOYgnkwZp_pWFiVqMs0vkaKclXv06GhAvLPZxAjxozhUGwIfwrSZahnkX38rftN9nLTqJB1ysY-2HJPPm42jORPCZfiPop0dZtoEekGi4XLg80Q3WE1R9Ma2XPMwgsh82LvFbxworMEyL-1f0opPdnpm4auJEEFfuddGAjDpzNQxhtqJKKoBbJL4mOwtHHZXHH56fWs4H5tYAqHIIwAUsztW4P9t5fWMuFQ0hNO34OKvfKJ8KE, redirectionURI=https://idp-dev.cc.binghamton.edu/openid-client/index.php <https://idp-dev.cc.binghamton.edu/openid-client/index.php>, state=260bc2b7618ae01cf048b91c135e82fd}
> DEBUG [org.opensaml.profile.action.impl.EncodeMessage:158] - Profile 
> Action EncodeMessage: Outbound message encoded to a message of type 
> com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse
> 
> DEBUG [PROTOCOL_MESSAGE.OAUTH2:114] -
> OIDCTokenRequestDecoder{authorizationGrant=AuthorizationCodeGrant{authorizationCode=AApzZWNyZXQxNTAyykyk7qQtshuJSLoRry30CQfwjvpsHhCzpUBq_qtUa6KnQiFhM5A36cQQU2Gu3D4VGOpBLoj-XxiDIOjWISd3aDXGWc2cRAsLYTQ73NstCFsQOfp15z0G8q71mVGOT2o-TY1R4CEo7Fyvd8JPZB5jAAhCdghbIc7tZe-KjK3O98lcaxV5rS2SvD4XJNO9aZGGEbUg7Kp6Bkxv4mdGyXFxJTlXDkqp9DmYBrmDY5m9DQ7z-EeuNO5SsPqYWmCPlIOe_PxtCrjxcrOYgnkwZp_pWFiVqMs0vkaKclXv06GhAvLPZxAjxozhUGwIfwrSZahnkX38rftN9nLTqJB1ysY-2HJPPm42jORPCZfiPop0dZtoEekGi4XLg80Q3WE1R9Ma2XPMwgsh82LvFbxworMEyL-1f0opPdnpm4auJEEFfuddGAjDpzNQxhtqJKKoBbJL4mOwtHHZXHH56fWs4H5tYAqHIIwAUsztW4P9t5fWMuFQ0hNO34OKvfKJ8KE, redirectionURI=https://yyyyyyyyyyyyyyy/openid-client/index.php <https://yyyyyyyyyyyyyyy/openid-client/index.php>, type=authorization_code}, clientAuthentication=ClientAuthentication{clientId=xxxxxxxxxxx, method=client_secret_post}, customParameters={}, endpointURI=https://yyyyyyyyy/idp/profile/oidc/token <https://yyyyyyyyy/idp/profile/oidc/token>}
> 
> DEBUG [PROTOCOL_MESSAGE.OAUTH2:135] -
> TokenErrorResponse{errorObject=ErrorObject{httpStatusCode=401, 
> code=invalid_client, description=Client authentication failed}}
> 
> Please let me know what else I should post.
> 
> Thanks,
> -Jeff
> 
> 
> -- 
> Jeffrey Ramsay 
> <https://calendar.google.com/calendar/embed?src=jramsay@binghamton.edu&ctz=America/New_York>
> Assistant Director of Enterprise Systems
> Binghamton University
> http://www.binghamton.edu <http://www.binghamton.edu>
> 
> 
>