v0.7.2
Patch Changes
-
#222
45397d8Thanks @mattzcarey! - Add an opt-inallowPublicClientsflag toenterpriseManagedAuthorization.By default the enterprise-managed authorization (ID-JAG) grant requires client authentication, so public clients (
token_endpoint_auth_method: 'none') are rejected. SettingallowPublicClients: truealso accepts public clients on this grant — for example clients registered via a Client ID Metadata Document (CIMD), which are always public and cannot present a client secret. The default remainsfalse, preserving existing behavior.