Hello, I am using CAS server 5.3 with support for openid connect server with a public web client with Angular technology and I use an angular-oidc client for connection with CAS.
Using the flow authorization code, how can I prevent CAS from asking for the client secret on the accesstoken and revoke endpoints? So that this data is not in the public web client.
Thank you.