why does that example have the browser sending a client secret ... • Aaron Parecki

49°F

Brock Allen https://twitter.com/BrockLAllen • Feb 25
People are asking, when using standards compliant OIDC client libraries:

https://github.com/authts/oidc-client-ts/issues/395#issue-1149525542

why does that example have the browser sending a client secret in the request? That seems odd. Happy to continue this over on the github thread.

Portland, Oregon, USA • 34°F

Thu, Feb 24, 2022 6:58pm -08:00

2 replies
Have you written a response to this? Let me know the URL:
- Aaron Parecki twitter.com/aaronpk
  
  Yep, I confirmed my suspicion. Misleading error message. Will post details on the github thread.
  
  Fri, Feb 25, 2022 3:03am +00:00 (via brid.gy)
- Brock Allen twitter.com/BrockLAllen
  
  Ah, good question -- I didn't notice that. I bet their client config is misconfigured then.
  
  Fri, Feb 25, 2022 3:00am +00:00 (via brid.gy)

Posted in /replies using quill.p3k.io