[External Email] Re: disable oauth2-jwt

[Jeffrey J Ramsay]

Okay. I ensured that client_secret_basic was set, but it still failed. So,
I uploaded the log, relying-party excerpt, oidc.properties settings,
idp.properties settings, and the PHP client code.

https://pastebin.com/UqY0F3dS

Thanks,
-Jeff

On Thu, Sep 19, 2024 at 5:27 PM Jeffrey J Ramsay <jramsay at binghamton.edu>
wrote:

> They were both the same at one point. I will post everything later this
> evening. I had to leave to pick up kid.
>
> Thanks.
>
> Jeff
>
> Sent from Gmail Mobile
>
>
> On Thu, Sep 19, 2024 at 5:14 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> > Here's the link. I can connect to other services, and the
>> > reason I'm using the same client.
>>
>> I don't know how you're managing the client metadata, but the client is
>> registered for one method and using another.
>>
>> Henri said as much when you asked this morning. That is the problem. I
>> didn't see the earlier messages.
>>
>> If you're using dynamic registration, the client's broken, it's telling
>> the OP it will use one method but using the other.
>>
>> With "manual" registration, you'd just fix the client metadata (JSON or
>> SAML format) and poke in the expected method, "client_secret_basic".
>>
>> Dynamic registration isn't really designed to be "fixed" in that way,
>> it's assumed to be correct in the first place because the client's the one
>> that asked for the setting.
>>
>> -- Scott
>>
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240919/ae2184d9/attachment.htm>