[External Email] Re: disable oauth2-jwt

[Cantor, Scott]

> Here's the link. I can connect to other services, and the
> reason I'm using the same client.

I don't know how you're managing the client metadata, but the client is registered for one method and using another.

Henri said as much when you asked this morning. That is the problem. I didn't see the earlier messages.

If you're using dynamic registration, the client's broken, it's telling the OP it will use one method but using the other.

With "manual" registration, you'd just fix the client metadata (JSON or SAML format) and poke in the expected method, "client_secret_basic".

Dynamic registration isn't really designed to be "fixed" in that way, it's assumed to be correct in the first place because the client's the one that asked for the setting.

-- Scott