[External Email] Re: disable oauth2-jwt

[Jeffrey J Ramsay]

They were both the same at one point. I will post everything later this
evening. I had to leave to pick up kid.

Thanks.

Jeff

Sent from Gmail Mobile


On Thu, Sep 19, 2024 at 5:14 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Here's the link. I can connect to other services, and the
> > reason I'm using the same client.
>
> I don't know how you're managing the client metadata, but the client is
> registered for one method and using another.
>
> Henri said as much when you asked this morning. That is the problem. I
> didn't see the earlier messages.
>
> If you're using dynamic registration, the client's broken, it's telling
> the OP it will use one method but using the other.
>
> With "manual" registration, you'd just fix the client metadata (JSON or
> SAML format) and poke in the expected method, "client_secret_basic".
>
> Dynamic registration isn't really designed to be "fixed" in that way, it's
> assumed to be correct in the first place because the client's the one that
> asked for the setting.
>
> -- Scott
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240919/9e9ada67/attachment.htm>