Skip to content

OAuth 2.0 Client Credentials Basic Auth #2106

Closed
@francesconi

Description

@francesconi

I have checked the following:

  • I've searched existing issues and found nothing related to my issue.

Describe the feature you want to add

There are multiple ways of authenticating OAuth 2.0 Clients at the /oauth2/token:

RFC 6749 section 2.3.1

  • HTTP Basic Authorization (client_secret_basic) - the OAuth 2.0 Client ID and secret are sent in the HTTP Header (Authorization: basic ....)
  • HTTP Body (client_secret_post) - the OAuth 2.0 Client ID and secret are sent in the POST body (Content-Type: application/x-www-form-urlencoded)

Currently, bruno only supports the client_secret_post method for client authentication. This feature request proposes adding support for client_secret_basic as configuration option.

Mockups or Images of the feature

image

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions