Skip to content

Relax client credentials grant requirement to SHOULD #253

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jeswr merged 2 commits into from
Apr 23, 2026
+5 −5
Merged

Relax client credentials grant requirement to SHOULD #253

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c5e5b9a
Relax client credentials grant requirement
jeswr Apr 23, 2026
3a78f03
Make client credentials discovery requirement conditional
jeswr Apr 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -443,7 +443,7 @@ Discovery 1.0 [[!OIDC-DISCOVERY]] resource by including `webid` in its `scopes_s
NOTE: This sections borrows concepts from OAuth 2.0 [[!RFC6749]], while the rest of Solid-OIDC builds on top of OpenID
Connect Core 1.0 [[!OIDC-CORE]]. The section is likely to be extracted into a separate specification in the future.

Authorization Servers MUST support the OAuth 2.0 Client Credentials Grant [[!RFC6749]] (Section 4.4) to enable
Authorization Servers SHOULD support the OAuth 2.0 Client Credentials Grant [[!RFC6749]] (Section 4.4) to enable
Comment thread
jeswr marked this conversation as resolved.
non-interactive authentication for scripts, automated agents, and server-to-server communication.

NOTE: Scripts and bots can also use Solid-OIDC without Client Credentials via the [refresh token
Expand All @@ -470,10 +470,10 @@ credentials.

## Solid-OIDC Conformance Discovery ## {#client-credentials-discovery}

For non-interactive use cases such as scripts, automated agents, and server-to-server communication, this specification
also requires that an OpenID Provider that conforms to the Solid-OIDC specification MUST advertise its support for the
[Client Credentials Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) in the OpenID Connect Discovery 1.0
[OIDC.Discovery] resource by including `client_credentials` in its `grant_types_supported` metadata property.
For non-interactive use cases such as scripts, automated agents, and server-to-server communication, an OpenID Provider
that supports the [Client Credentials Grant](https://www.rfc-editor.org/rfc/rfc6749#section-4.4) MUST advertise that
support in the OpenID Connect Discovery 1.0 [OIDC.Discovery] resource by including `client_credentials` in its
`grant_types_supported` metadata property.

<div class="example">
<pre highlight="json">
Expand Down