OIDC OP Plugin "issues"

[Henri Mikkonen]

Hi Michael,

On 24.2.2025 19.05, Lazar, Michael E via users wrote:
> After I enter creds (I do see a login screen), I get an "Invalid Event" 
> message out of the node app with an IdP log stub:
> 
> WARN 
> [net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType:169] - Profile Action ValidateClientAuthenticationType: Client '********' registered client_secret_basic but attempted client_secret_post

The snippet "registered client_secret_basic" tells you that from the 
OP'a perspective the RP should be using "client_secret_basic" method in 
client authentication.

The documentation [1] refers to to OIDC dynamic client registration spec 
[2]: you can change the default client authentication method via 
"token_endpoint_auth_method" attribute.

The snippet "attempted client_secret_post" tells you that your RP seems 
to be using "client_secret_post", so you should configure the RP 
metadata accordingly.

BR,
Henri.

[1] 
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879133/OPMetadataClientRegistration#JSON-Format

[2] https://openid.net/specs/openid-connect-registration-1_0.html