afebbf29a9
According to the OAuth spec https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing an Access Token" > The authorization server MUST ... require client authentication for confidential clients Fixes #21418 Co-authored-by: Gusted <williamzijl7@hotmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> |
||
---|---|---|
.. | ||
2fa.go | ||
auth.go | ||
linkaccount.go | ||
main_test.go | ||
oauth.go | ||
oauth_test.go | ||
openid.go | ||
password.go | ||
webauthn.go |