From 3b223195fb3e731c8c4a1e973fa098c489598979 Mon Sep 17 00:00:00 2001
From: Simon Ser <contact@emersion.fr>
Date: Mon, 19 Feb 2024 14:53:14 +0100
Subject: [PATCH] Advertise "none" client auth

This is used by public clients.

---
 oauth2.go | 6 +++---

diff --git a/oauth2.go b/oauth2.go
index cb427641c5a856bc1cf4487498f7a67fbe4f94ea..d057fb7d235c6e6c9ce2853c579bf1c8a61ca17a 100644
--- a/oauth2.go
+++ b/oauth2.go
@@ -37,9 +37,9 @@ 		RevocationEndpoint:                        issuer + "/revoke",
 		ResponseTypesSupported:                    []oauth2.ResponseType{oauth2.ResponseTypeCode},
 		ResponseModesSupported:                    []oauth2.ResponseMode{oauth2.ResponseModeQuery},
 		GrantTypesSupported:                       []oauth2.GrantType{oauth2.GrantTypeAuthorizationCode},
-		TokenEndpointAuthMethodsSupported:         []oauth2.AuthMethod{oauth2.AuthMethodClientSecretBasic},
-		IntrospectionEndpointAuthMethodsSupported: []oauth2.AuthMethod{oauth2.AuthMethodClientSecretBasic},
-		RevocationEndpointAuthMethodsSupported:    []oauth2.AuthMethod{oauth2.AuthMethodClientSecretBasic},
+		TokenEndpointAuthMethodsSupported:         []oauth2.AuthMethod{oauth2.AuthMethodNone, oauth2.AuthMethodClientSecretBasic},
+		IntrospectionEndpointAuthMethodsSupported: []oauth2.AuthMethod{oauth2.AuthMethodNone, oauth2.AuthMethodClientSecretBasic},
+		RevocationEndpointAuthMethodsSupported:    []oauth2.AuthMethod{oauth2.AuthMethodNone, oauth2.AuthMethodClientSecretBasic},
 	})
 }
 

-- 
2.48.1