OpenID Connect client authentication: basic auth and client secret post

[@carlotadias9335]

🤙🤙

[@reactionchamber]

If I have the username and password, how can I request the client_secret_basic? Or is there a way to authorize directly to the token server?

[@pololintello]

Is the client making this post request ? If so, does it mean that any user is able to see the client id and client secret in the network activity of the page ?

[@jgoebel]

with OIDC you always use TLS, so the connection is encrypted on the transport layer