adb014 commented on PR #517:
URL: https://github.com/apache/guacamole-client/pull/517#issuecomment-4212558036

   I added OIDC code flow in #1198. I believe AWS Cognito supports code flow so 
Cognito should work directly with my PR. 
   
   There is 
   [no token 
response_type](https://openid.net/specs/openid-connect-core-1_0.html#Authentication)
 in the OIDC standard, though there is a response type « id_token token » that 
allows both an id_token and access token to be returned in the response from 
the authorization endpoint in implicit flow. As implicit flow is deprecated, 
AWS Cognito doesn’t respect the standard and you could get around the issue 
using code flow, it seems to me that if my PR is accepted the response_type 
should not made configurable 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to