2 ms·

Authentik has completely messed up their implementation of the oauth client credentials grant. It is not fixable without breaking changes and does not work with

Authentik has completely messed up their implementation of the oauth client credentials grant. It is not fixable without breaking changes and does not work with many tools using the cc grant. After seeing this they were completely off the table for me. https://github.com/goauthentik/authentik/issues/6139 https://github.com/goauthentik/authentik/issues/6139

BeryJu 3y ago
See here for the fix, which both implements the workaround suggested in the issue and also a much more standard-compliant method: https://github.com/goauthentik/authentik/pull/8471 https://github.com/goauthentik/authentik/pull/8471
BeryJu 3y ago
authentik CTO here; we’ll fix this in the next release (match-april), it should be possible in a non backwards incompatible way using the suggestion in this comment https://github.com/goauthentik/authentik/issues/6139#issuecomment-1791093921 https://github.com/goauthentik/authentik/issues/6139#issueco... (which does call that solution a hack but I wouldn’t necessarily agree)