Skip to content

v0.3.5 — DATEV OAuth token exchange (client_secret_basic)

Choose a tag to compare

View all tags
@keysersoft keysersoft released this 17 Jul 08:36
v0.3.5
0441043
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixes

  • DATEV connector OAuth token exchange (#419): DATEV's token endpoint requires HTTP Basic client authentication (WWW-Authenticate: Basic) and rejects body-supplied credentials with 401 invalid_client. The connector authorization-code exchange previously sent client_id/client_secret only in the request body, so every DATEV confidential client failed at the token step. Added a per-connector tokenAuthMethod (basic | default post); the DATEV adapter now uses basic, applied to both the initial code exchange and token refresh. Default behaviour is unchanged for all other connectors.

Verification: confirmed read-only against DATEV's sandbox token endpoint (correct per DATEV's own OIDC discovery); backend typecheck + lint clean; connector OAuth tests 22/22 (3 new).

Note: a valid DATEV client secret is still required end-to-end — this release fixes the authentication method that was blocking all DATEV token exchanges.

Assets 2
Loading