We are currently implementing MTLS in IdentityServer.
Our approach will be that we’ll offer a separate token endpoint that
supports client certs. Are you planning on adding an official endpoint name
for discovery? Right now we are using “mtls_token_endpoint”..
Thanks
———
Dominick
On 7. February
On Thu, Feb 07, 2019 at 02:28:02PM -0700, Brian Campbell wrote:
>
> The token-exchange draft defines both the "resource" and "audience"
> parameters for use in the context of a
> "urn:ietf:params:oauth:grant-type:token-exchange" grant type request to the
> token endpoint. There is a lot of overlap