Gerard Alvear Porras e95243ae68 Document OIDC token endpoint authentication method (#9027) ...

Explain that mod_auth_openidc defaults to client_secret_basic since
our reference Apache configuration does not set
OIDCProviderTokenEndpointAuth. If the identity provider's discovery
metadata advertises a token_endpoint_auth_methods_supported array
instead, mod_auth_openidc picks the first mutually supported method
from that array rather than falling back to client_secret_basic.
Also point to the .htaccess override for administrators who need
something else.

This only addresses the token-endpoint-auth-method part of #6102;
the redirect-URI-port question raised in that issue is out of scope
here.

Addresses the token-endpoint-auth-method part of #6102

Co-authored-by: Gerard Alvear <gerard.alvear@logiqd.me>

2026-07-11 17:35:01 +02:00

..

admins

Document OIDC token endpoint authentication method (#9027)

2026-07-11 17:35:01 +02:00

developers

Add read status hook for entries (#8995)

2026-07-07 09:04:32 +02:00

img

Add a form to create new user queries on the User Queries page (#8623)

2026-04-03 22:29:44 +02:00

users

Document PHP-FPM write restrictions for data path (#8936)

2026-06-22 12:25:06 +02:00

contributing.md

Fix GH issue links with label filter in docs (#8993)

2026-07-06 13:22:52 +02:00

index.md

docs: standardise English heading style and surface hidden pages (#8766)

2026-05-02 22:23:35 +02:00

internationalization.md

Initial conventions for AI agents and humans: AGENTS.md, SKILLS.md, instructions.md (#8478)

2026-02-01 13:06:53 +01:00