CAS 5.3 OpenId server support /accesstoken and /revoke endpoint need a client secret

14 views
Skip to first unread message

Nicolas Alderete

unread,
Apr 7, 2020, 9:28:32 AM4/7/20
to CAS Community
Hello, I am using CAS server 5.3 with support for openid connect server with a public web client with Angular technology and I use an angular-oidc client for connection with CAS.
Using the flow authorization code, how can I prevent CAS from asking for the client secret on the accesstoken and revoke endpoints? So that this data is not in the public web client.

Thank you.
Reply all
Reply to author
Forward
0 new messages