auth-method
The introspection request can be authenticated using Basic Authentication or Forms.
Syntax
auth-method = {client_secret_post | client_secret_basic}
Description
Controls the method by which the authentication information is supplied to the introspection
endpoint. This configuration item may be customized for a particular junction
by adding the adjusted configuration item to a [oauth-introspection:{jct_id}] stanza, where
'{jct-id}' refers to the junction point for a standard junction
(include the leading '/'), or the virtual host label for a virtual host junction.
Options
- client_secret_post
- The authentication information is supplied in a form POST.
- client_secret_basic
- The authentication information is provided in an authorization header.
Usage
This stanza entry is required.
Default value
client_secret_post
Example
auth-method = client_secret_basic