github/kubelogin
1
0
Fork 0
mirror of https://github.com/int128/kubelogin.git synced 2026-02-14 16:39:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Set auth style when no client secret in use (#1289)

Browse Source 
Co-authored-by: Hidetake Iwata <int128@gmail.com>
This commit is contained in:
Karolína Lišková
2025-11-23 06:43:21 +00:00
committed by GitHub
parent 1ead2a405e
commit 5d091e486a
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/oidc/client/factory.go
View File

@@ -62,11 +62,17 @@ func (f *Factory) New(ctx context.Context, prov oidc.Provider, tlsClientConfig t
if err != nil { if err != nil {
return nil, fmt.Errorf("could not determine supported PKCE methods: %w", err) return nil, fmt.Errorf("could not determine supported PKCE methods: %w", err)
} }
endpoint := provider.Endpoint()
if prov.ClientSecret == "" {
endpoint.AuthStyle = oauth2.AuthStyleInParams
}
return &client{ return &client{
httpClient: httpClient, httpClient: httpClient,
provider: provider, provider: provider,
oauth2Config: oauth2.Config{ oauth2Config: oauth2.Config{
Endpoint: provider.Endpoint(), Endpoint: endpoint,
ClientID: prov.ClientID, ClientID: prov.ClientID,
ClientSecret: prov.ClientSecret, ClientSecret: prov.ClientSecret,
RedirectURL: prov.RedirectURL, RedirectURL: prov.RedirectURL,