Skip to content

Commit 7353ed3

Browse files
authored
Relax client credentials grant requirement to SHOULD (#253)
* Relax client credentials grant requirement * Make client credentials discovery requirement conditional
1 parent 149502d commit 7353ed3

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

index.bs

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -443,7 +443,7 @@ Discovery 1.0 [[!OIDC-DISCOVERY]] resource by including `webid` in its `scopes_s
443443
NOTE: This sections borrows concepts from OAuth 2.0 [[!RFC6749]], while the rest of Solid-OIDC builds on top of OpenID
444444
Connect Core 1.0 [[!OIDC-CORE]]. The section is likely to be extracted into a separate specification in the future.
445445

446-
Authorization Servers MUST support the OAuth 2.0 Client Credentials Grant [[!RFC6749]] (Section 4.4) to enable
446+
Authorization Servers SHOULD support the OAuth 2.0 Client Credentials Grant [[!RFC6749]] (Section 4.4) to enable
447447
non-interactive authentication for scripts, automated agents, and server-to-server communication.
448448

449449
NOTE: Scripts and bots can also use Solid-OIDC without Client Credentials via the [refresh token
@@ -470,10 +470,10 @@ credentials.
470470

471471
## Solid-OIDC Conformance Discovery ## {#client-credentials-discovery}
472472

473-
For non-interactive use cases such as scripts, automated agents, and server-to-server communication, this specification
474-
also requires that an OpenID Provider that conforms to the Solid-OIDC specification MUST advertise its support for the
475-
[Client Credentials Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) in the OpenID Connect Discovery 1.0
476-
[OIDC.Discovery] resource by including `client_credentials` in its `grant_types_supported` metadata property.
473+
For non-interactive use cases such as scripts, automated agents, and server-to-server communication, an OpenID Provider
474+
that supports the [Client Credentials Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) MUST advertise that
475+
support in the OpenID Connect Discovery 1.0 [OIDC.Discovery] resource by including `client_credentials` in its
476+
`grant_types_supported` metadata property.
477477

478478
<div class="example">
479479
<pre highlight="json">

0 commit comments

Comments
 (0)