Using a clientId should no longer be forcing token auth

[martin-morek]

• Fixes #345
• Basic authentication can be used with specified clientId

[sacOO7]

As a part of original issue, it seems there were lot of changes to the spec. I can see RSA4 being removed, but spec still exists for the same. @martin-morek can you double check if all spec changes are being addressed as a part of change? Because I strongly feel we might be missing out on changed spec items, maybe missing tests. Also, spec change looks too long, so I did't get time to go through each spec item. But double checking and making sure, every spec item implementation/ with tests is present will be super helpful

[QuintinWillison]

@martin-morek, it sounds like it's worth double checking. Thanks for your input, @sacOO7.

[martin-morek]

@sacOO7 @QuintinWillison Sorry, but I'm missing out the context a bit. About what spec changes are we talking about? Could you please point me where can I find them to verify?

[sacOO7]

As per original issues, you can see spec changes that happened as a part of PR to the DOC

[martin-morek]

I've tried to verify it, RSA4 spec should be okey, there are tests for each scenario.