User pool third-party OIDC - token request

0

I am setting up a third-party OIDC provider with my Cognito user pool that is only enabled for using the Authorization code grant. I've noticed that when AWS makes the request to my token endpoint, it includes the Client ID and Client Secret as fields in the POST request body, rather than in the Authorization header. Is there any configuration that can change this behavior to the more standard use of the Authorization header?

已提问 2 年前428 查看次数
1 回答
0
已接受的回答

Hi,

There is no configuration to change this behavior currently, Cognito uses client_secret_post when communicating with the external IdP.

AWS
专家
已回答 2 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则