Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add a new guard clause to the oauth2 client credentials flow. #1050

Merged
merged 1 commit into from
Sep 4, 2024
Merged

Add a new guard clause to the oauth2 client credentials flow. #1050

merged 1 commit into from
Sep 4, 2024

Commits on Sep 4, 2024

  1. Fix sending an empty scope on OAuth2ClientCredentialsAuth 

    According to the section 3.3 of RFC 6749 OAuth2 Access Token Scope,
this is the notation that defines how the scope should be send to the
IdentityProvider:
     `scope = scope-token *( SP scope-token )`

Basically it should be omitted if it's empty.
    @decko
    decko committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    7a8f2e1 View commit details
    Browse the repository at this point in the history