oidc-client-ts
oidc-client-ts copied to clipboard
Revoke Token Request doesn't respect client_authentication settings
Hi @all
Revoke Token Request doesn't respect client_authentication settings
TokenRequest: https://github.com/authts/oidc-client-ts/blob/1f4390bd2a2f0e2670a63e712ccf4c23df31ae55/src/TokenClient.ts#L133 RevokeRequest: https://github.com/authts/oidc-client-ts/blob/1f4390bd2a2f0e2670a63e712ccf4c23df31ae55/src/TokenClient.ts#L180
In RFC there is a example: https://datatracker.ietf.org/doc/html/rfc7009#section-2.1
POST /revoke HTTP/1.1
Host: server.example.com
Content-Type: application/x-www-form-urlencoded
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW
token=45ghiukldjahdnhzdauz&token_type_hint=refresh_token
This request will used a Authorization: Basic.
I guess its time to move the switch block (which we have already two times) into its own private function and make use of it for revoke too...
Would be nice if you could provide a merge request for this...