OAuth2ClientOptons.isUseBasicAuthorizationHeader is ignored now
Version
3.8.5
Context
Quarkus user works with the OIDC server which does not recognize the Basic Auth header and as such the token acquisition request fails.
It has changed in 3.8.5 as part of this merge.
It contained a good fix in that the authentication info was not duplicated in both the Authorization header and the form params, but unfortunately the option to authenticate via the form params has been lost.
The form parameter based authentication should still be supported if the basic authorization header is disabled.
Thanks.
Hi Paulo, @pmlopes. please do a minor fix for 3.8.6 :-)
Hi Paulo, it may be not critical if the user confirms their OIDC server can accept Basic auth, which is a good news, hopefully, but yeah, a minor fix for 3.8.6 would not harm anyway :-) as there could be a number of legacy (or otherwise not supporting the basic auth) servers