auth-method

The introspection request can be authenticated using Basic Authentication or Forms.

Syntax

auth-method = {client_secret_post | client_secret_basic}

Description

Controls the method by which the authentication information is supplied to the introspection endpoint. This configuration item may be customized for a particular junction by adding the adjusted configuration item to a [oauth-introspection:{jct_id}] stanza, where '{jct-id}' refers to the junction point for a standard junction (include the leading '/'), or the virtual host label for a virtual host junction.

Options

client_secret_post
The authentication information is supplied in a form POST.
client_secret_basic
The authentication information is provided in an authorization header.

Usage

This stanza entry is required.

Default value

client_secret_post

Example

auth-method = client_secret_basic