openid-client/docs/functions/TlsClientAuth.md

Function: TlsClientAuth()

💗 Help the project

Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.

---

▸ TlsClientAuth(): ClientAuth

tls_client_auth uses the HTTP request body to send only client_id as application/x-www-form-urlencoded body parameter and the mTLS key and certificate is configured through ClientMetadata.use_mtls_endpoint_aliases and customFetch.

Returns

ClientAuth

Examples

Usage with a Configuration obtained through discovery

let server!: URL
let clientId!: string

let clientMetadata = { use_mtls_endpoint_aliases: true }
let config = await client.discovery(
  server,
  clientId,
  clientMetadata,
  client.TlsClientAuth(),
)

Usage with a Configuration instance

let server!: client.ServerMetadata
let clientId!: string

let clientMetadata = { use_mtls_endpoint_aliases: true }
let config = new client.Configuration(
  server,
  clientId,
  clientMetadata,
  client.TlsClientAuth(),
)

See

• OAuth Token Endpoint Authentication Methods
• RFC 8705 - OAuth 2.0 Mutual-TLS Client Authentication (PKI Mutual-TLS Method)