Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is Implicit Flow supported? #130

Closed
surfnet-niels opened this issue Apr 4, 2016 · 1 comment
Closed

Is Implicit Flow supported? #130

surfnet-niels opened this issue Apr 4, 2016 · 1 comment

Comments

@surfnet-niels
Copy link

I am trying to set up an RP for use with an OP that only supports Implicit Flow

My config is as following:

        OIDCClientID "someclientid"
        OIDCResponseType "id_token"
        OIDCScope "openid persistent student"
        OIDCRedirectURI https://demoshop.inacademia.org/validate/do.php
        OIDCCryptoPassphrase somesecret

According to https://github.com/pingidentity/mod_auth_openidc/blob/master/auth_openidc.conf#L149
I should not need a client secret, however, oidc_check_config throws an error:
[Mon Apr 04 13:15:32.839645 2016] [auth_openidc:error] [pid 15220] oidc_check_config_error: mandatory parameter 'OIDCClientSecret' is not set

Looking at the sources at https://github.com/pingidentity/mod_auth_openidc/blob/master/src/config.c#L1506
it is not clear if it should be working, or if it is to be done.

Am I missing something?

@zandbelt
Copy link
Member

zandbelt commented Apr 4, 2016

The Implicit flow is supported but you may be experiencing a configuration glitch wrt. a single statically configured provider; for now you should be able to configure a dummy secret; I'll look in to it shortly

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants