Skip to content

Commit 50e297d

Browse files
committed
Generalize client authentication validation in Client Credentials grant
1 parent 69ea20f commit 50e297d

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

index.bs

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -462,8 +462,8 @@ NOTE: [[!RFC7523]] (Section 2.2) presents another way to handle authentication u
462462
## Token Instantiation ## {#client-credentials-token-instantiation}
463463

464464
During Token Instantiation [[#tokens]], if the [Client Credentials
465-
Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) is used, the OP MUST validate the `client_id` and
466-
`client_secret`. If valid, the OP MUST return a DPoP-bound OIDC ID Token.
465+
Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) is used, the OP MUST validate the client's authentication
466+
credentials.
467467

468468
## Solid-OIDC Conformance Discovery ## {#client-credentials-discovery}
469469

0 commit comments

Comments
 (0)