This client violates the RFC for openid

[hcldan]

Greetings!

We recently got a support ticket from a customer who is using your passport oauth2 module.
They are having an issue with client authentication. The issue does not occur when using other standards-compliant modules to do oauth2 flows.

We use https://github.com/panva/node-oidc-provider an OpenID certified project as our server.
I believe the issue we are running into is this: https://github.com/panva/node-oidc-provider/issues/361

The problem is that the spec is not being followed in the passport-oauth2 module.
Could you look into this? Is this something you are willing to fix?
This issue may be related: #106

Thanks!

[jaredhanson]

Have you identified whether the issue is this package, or the underlying node-oauth package? The underlying package is responsible for serializing credentials, so it may be there.

…

Sent from my iPhone

On Oct 10, 2019, at 2:07 PM, Dan Dumont ***@***.***> wrote: Greetings! We recently got a support ticket from a customer who is using your passport oauth2 module. They are having an issue with client authentication. The issue does not occur when using other standards-compliant modules to do oauth2 flows. We use https://github.com/panva/node-oidc-provider an OpenID certified project as our server. I believe the issue we are running into is this: panva/node-oidc-provider#361 The problem is that the spec is not being followed in the passport-oauth2 module. Could you look into this? Is this something you are willing to fix? This issue may be related: #106 Thanks! — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[hcldan]

I'll take a look

[hcldan]

Actually... taking a look at that project, you may want to consider moving away. Last commit was 2017.
There are tons of open issues, and it appears to be abandoned.